Publicly Disclosed
PoC Exploits

A security vulnerability in Cloudflare WARP for Windows enables users with limited privileges to create symbolic links in the C:\ProgramData\Cloudflare\warp-diag-partials directory. When the 'Reset all settings' option is triggered, the WARP service—operating with System privileges—can inadverten...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

An OS command injection vulnerability exists in Fortinet FortiSandbox versions 4.4.0 through 4.4.8. This flaw arises from improper neutralization of special elements used in operating system commands. An attacker can exploit this vulnerability to execute unauthorized commands, potentially comprom...

A resource exhaustion vulnerability in cowlib allows unauthenticated remote HTTP/2 or HTTP/3 peers to exhaust memory on servers or clients. The flaw lies in the HPACK and QPACK prefixed-integer decoder, which does not impose limits on continuation octets and can lead to severe memory allocation i...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A security flaw has been identified in Sony Neural Network Libraries, specifically affecting the NNP Converter component. The vulnerability resides in the `func_set_nnabla_version_decorate` function located in the `python/src/nnabla/utils/converter/utils.py` file. By manipulating the `function.ty...

Pillow, a widely used Python imaging library, is susceptible to an argument injection vulnerability found in its EpsImagePlugin when utilizing Ghostscript for EPS inputs. This flaw arises from the inadequate sanitization of caller-controlled input filenames, which can lead to the execution of arb...

A vulnerability has been identified in the Sony Neural Network Libraries, particularly in the Encode Param Command Handler's load_param_in_txt function. This flaw allows an attacker to execute code remotely by manipulating the application. The exploit is known and publicly accessible, posing a si...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

A critical flaw has been identified in Fusion Creators Studio's SCP Containment Breach Multiplayer, specifically impacting the Skynet++ Virtual Machine's BlitzBanks function up to version 1.295. This vulnerability enables attackers to execute remote manipulations, potentially leading to an out-of...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability has been discovered in CloudClassroom-PHP-Project that affects the addnewstudent.php file, where improper handling of the 'fname' argument can lead to cross site scripting (XSS) attacks. This vulnerability allows remote attackers to execute arbitrary scripts in the context of the ...

A vulnerability exists in the ggml-org Llama.cpp Pocket-TTS component, specifically in the function list_pockettts_state_slots within the source file tools/mtmd/models/pockettts-gen.cpp. This flaw allows for an out-of-bounds write due to the manipulation of the mmproj argument. While exploitation...

A vulnerability exists in the ggml-org Llama.cpp Pocket-TTS component, specifically in the function list_pockettts_state_slots within the source file tools/mtmd/models/pockettts-gen.cpp. This flaw allows for an out-of-bounds write due to the manipulation of the mmproj argument. While exploitation...

A vulnerability has been discovered in versions 1.7.0 to 1.10.1 of the llm-multimodal component by smg-project. This vulnerability originates from the jpeg_turbo::decode_jpeg_rgb function, located in the file crates/multimodal/src/jpeg_turbo.rs. It allows for uncontrolled memory allocation, enabl...

A significant vulnerability has been identified in EyouCMS versions up to 1.8.3, specifically within the remote_file_to_local function in application/function.php. This flaw could allow an attacker to manipulate requests and potentially execute server-side request forgery from a remote location, ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A memory corruption vulnerability exists within the Primary Bootloader when processing a specifically crafted ELF file. This flaw can lead to potential unauthorized access or execution of malicious code, posing significant security risks to devices utilizing affected Qualcomm Snapdragon processor...

A memory access vulnerability in the Linux Kernel relates to improper cache handling during vhost device configuration. Specifically, the vhost_iotlb_map metadata cache does not reset on certain ioctl calls, leading to potential unauthorized memory access. This could cause severely unexpected beh...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the SMA1000 Appliance's Work Place interface that allows for Pre-authentication SSRF attacks. This occurs due to an unintended alternate access path, enabling remote unauthenticated attackers to exploit the system. By leveraging this vulnerability, an attacker may gain u...

MLflow, the open-source AI engineering platform, contains a flaw in its webhook validation process. The issue resides in the POST /api/2.0/mlflow/webhooks/{id}/test endpoint, which neglects to fully validate URLs when processing redirects. This oversight can permit attackers to access internal or...

A vulnerability exists in DedeCMS versions up to and including 5.7.118, specifically in the require_once function of the file dede/update_guide.php. This flaw allows an attacker to manipulate the vtime argument, facilitating code injection. Such a vulnerability can be remotely exploited, thus pos...

A security flaw has been identified in the SourceCodester Performance Indicator System version 1.0, specifically within the processing of the /opils/staff/save_profile.php file. This vulnerability enables attackers to manipulate the 'Contact' argument, leading to a successful SQL injection attack...

A SQL injection vulnerability has been discovered in the SourceCodester Performance Indicator System 1.0, specifically within the /opils/staff/edit_dealer.php file. The flaw is due to improper validation of the 'Contact' argument, allowing attackers to execute malicious SQL statements. This vulne...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability has been identified in the SourceCodester Performance Indicator System 1.0, specifically within the /opils/staff/adddealer.php file. This issue arises from improper handling of the 'Contact' argument, which allows an attacker to execute SQL injection attacks remotely. With this ex...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability has been identified in the SourceCodester Performance Indicator System 1.0, specifically within the /opils/admin/deleteproduct.php file. This issue arises from improper handling of user inputs, where manipulation of the 'ID' argument can lead to SQL injection. Attackers can exploi...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

The vulnerability in SPIP affects earlier versions than 4.4.18, where an unauthenticated blind SQL injection exists in the public sitemap endpoint. This flaw occurs due to the MySQL escaper, spip_mysql_cite(), returning unescaped values when the target column type is date and the supplied value c...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Traefik, an open-source HTTP reverse proxy and load balancer, is susceptible to a vulnerability that allows for cross-vhost routing bypass and path-scoped authorization bypass. The issue arises because Traefik accepts a rootless HTTP/1 request target stored in URL.Opaque while leaving URL.Path em...

Traefik versions prior to v2.11.55 are susceptible to an authentication bypass vulnerability present in the digestAuth middleware. This flaw allows attackers to exploit a scenario where unknown usernames are given an empty secret, leading to an absence of rejection during authentication attempts....

A vulnerability in n8n, an open-source workflow automation platform, was identified where earlier versions permitted dynamic binding through a sanitizer that failed to reject reserved class member names. Specifically, a class field named '__sanitize' could effectively rebind the sanitizer, allowi...

A vulnerability in the krupalshah Employee Recruitment System affects the Registration component, specifically within the /source/registerform3.php file. The manipulation of the 'pemail' parameter can lead to SQL injection attacks, allowing an attacker to execute arbitrary SQL commands remotely. ...

A vulnerability exists in the krupalshah EmployeeRecruitmentSystem within the Registration Wizard's mysql_query function located in /source/registerform2.php. This flaw allows attackers to manipulate parameters like university, institute, branch, degree, status, CPI, semester, and experience, lea...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A vulnerability in the krupalshah EmployeeRecruitmentSystem allows for SQL injection through manipulated user input fields such as firstname, middlename, lastname, gender, birthdate, state, statespecify, city, and cityspecify in the /source/registerform1.php file. This issue enables attackers to ...

A security flaw has been identified in Privoce's Vocechat (versions up to 0.9.121) related to its Query Parameter Handler. The vulnerability stems from improper handling of the 'welcome' parameter in the 'widget.html' file. This oversight allows attackers to execute malicious scripts in the user'...

A path traversal vulnerability was identified in the 1999AZZAR Designer MCP product, specifically in the 'get_reference' function within the MCP Interface. The flaw allows an attacker to manipulate the input argument 'Name', potentially exploiting the system through remote requests. As the exploi...

The Duplicator plugin for WordPress prior to version 5.0.0 contains a security flaw that permits unauthorized users to execute arbitrary PHP code on a multisite environment. Specifically, the plugin's one-click upgrade feature lacks sufficient access controls and is exposed without authentication...

The Datawiza Proxy Auth Plugin for WordPress is vulnerable due to insufficient validation of user-identity and role HTTP request headers from untrusted sources. This flaw allows attackers to impersonate an authenticated user, potentially gaining administrator access without the necessary credenti...

The WPVR plugin for WordPress prior to version 9.1.3 is susceptible to a user role bypass vulnerability. This flaw occurs during the setup wizard, where insufficient validation of user capabilities allows individuals with Contributor roles and above to create and publish tour content improperly. ...