- Notifications
You must be signed in to change notification settings - Fork0
alpernae/vulnerability-research
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
This repository contains information about my security vulnerability discoveries and CVE submissions.
This repository serves as a portfolio of my vulnerability research and successful CVE submissions to track my contributions to the security community.
Each CVE submission is documented in its own folder with the following format:
CVE-YEAR-XXXXX/├── README.md (detailed writeup)├── proof-of-concept├── exploit-code| CVE ID | Description | Status | Date Assigned |
|---|---|---|---|
| CVE-2024-40422 | The snapshot_path parameter in the /api/get-browser-snapshot endpoint is susceptible to a path traversal attack. An attacker can manipulate the snapshot_path parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized access to critical system files and compromise the confidentiality and integrity of the system. | Assigned | Jul 24, 2024 |
| CVE-2022-28132 | The T-Soft E-Commerce 4 web application is susceptible to SQL injection (SQLi) attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication mechanisms, view sensitive information stored in the database, and potentially exfiltrate data. | Assigned | Nov. 21, 2024 |
| CVE-2020-35241 | FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie according to the crafted payload. | Assigned | Nov. 21, 2024 |
This is a personal repository to track my own CVE submissions. However, if you spot any errors or have suggestions for improvements, please open an issue.
This repository is licensed underMIT License.
Note: Always follow responsible disclosure practices and vendor coordination policies when submitting CVEs.
About
No description, website, or topics provided.
Resources
Uh oh!
There was an error while loading.Please reload this page.
Stars
Watchers
Forks
Releases
No releases published
Packages0
No packages published