Exploits from Github
567 subscribers
1 photo
664 files
3.6K links
Download Telegram
CVE-2024-1709

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel

vulnerability, which may allow an attacker direct access to confidential information or

critical systems.



Github link:
https://github.com/AMRICHASFUCK/Mass-CVE-2024-1709
CVE-2023-38408

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

Github link:
https://github.com/fazilbaig1/cve_2023_38408_scanner