// underground exploit database v2.0
In Splunk Enterprise on Windows below 9.2.2, 9.1.5 and 9.0.10, an unauthenticated attacker can perform a path traversal on the /modules/messaging/ endpoint to read arbitrary files.
The JwtAuthenticator in pac4j-jwt skips signature verification for JWE-wrapped PlainJWT (unsigned) tokens, letting an attacker forge valid authentication tokens using only the server's RSA public key.
Notepad++ through v8.9.6 allows remote code execution by abusing the commandLineInterpreter setting in config.xml, leading to arbitrary command execution.
Argus Surveillance DVR v4.0 employs weak password encryption
An improper neutralization of special elements used in an SQL command (SQLI) vulnerability [CWE-89] in Fortinet FortiWeb version 7.6.0
Langflow exposes a /api/v1/builder/execute_code endpoint that takes user-supplied Python code and passes it directly to exec() on the backend. Since there's no authentication or sandboxing, attackers can craft arbitrary payloads for code execution.
What PoCLand is, how it works, and why we built this project to centralize PoCs for known vulnerabilities.
