TheHermione

3 exploits Active since Apr 2023
CVE-2023-28231 NOMISEC HIGH WORKING POC
Microsoft Windows Server 2008 - Heap Buffer Overflow
DHCP Server Service Remote Code Execution Vulnerability
69 stars
CVSS 8.8
CVE-2024-45264 NOMISEC HIGH WRITEUP
SkySystem Arfa-CMS <5.1.3124 - CSRF
A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.
CVSS 8.8
CVE-2024-45265 NOMISEC CRITICAL WRITEUP
SkySystem Arfa-CMS <5.1.3124 - SQL Injection
A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter.
CVSS 9.8