summerxxoo/VulnPoc

summerxxoo/VulnPoc

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-55081↗
9.8 CRITICAL—

An XML External Entity (XXE) injection vulnerability in the component /datagrip/upload of Chat2DB v0.3.5 allows attackers to execute arbitrary code via supplying a crafted XML input.

CVE-2024-55082↗
7.5 HIGH—

A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request.