CVE-2023-5360.zip
4.6 KB
CVE-2023-5360
Author: LaviruDilshan
The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
GitHub Link:
https://github.com/LaviruDilshan/CVE-2023-5360-exploit-with-native-libraries
Author: LaviruDilshan
The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
GitHub Link:
https://github.com/LaviruDilshan/CVE-2023-5360-exploit-with-native-libraries
CVE-2019-13288
Author: ngtuonghung
In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646.
GitHub Link:
https://github.com/ngtuonghung/CVE-2019-13288
Author: ngtuonghung
In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646.
GitHub Link:
https://github.com/ngtuonghung/CVE-2019-13288
🍾1
CVE-2025-14847
Author: franksec42
None
GitHub Link:
https://github.com/franksec42/mongobleed-exploit-CVE-2025-14847
Author: franksec42
None
GitHub Link:
https://github.com/franksec42/mongobleed-exploit-CVE-2025-14847
🍾1
CVE-2019-9506
Author: BrainsBook
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.
GitHub Link:
https://github.com/BrainsBook/knob
Author: BrainsBook
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.
GitHub Link:
https://github.com/BrainsBook/knob
🍾1