Publicly Disclosed
PoC Exploits

A vulnerability in the Linux kernel's TCP socket management has been identified, allowing for a use-after-free scenario that can impact network security. Specifically, the issue arises when ownership of certain socket options is transferred between parent and child sockets without proper manageme...

A vulnerability in the Linux kernel's TCP socket management has been identified, allowing for a use-after-free scenario that can impact network security. Specifically, the issue arises when ownership of certain socket options is transferred between parent and child sockets without proper manageme...

A vulnerability in OpenHands prior to version 1.25.0 exposes a missing authentication issue within the Landing Page component. This flaw can be exploited by an attacker from the local network, potentially leading to unauthorized access. It is crucial for users to upgrade to version 1.25.0 where t...

A vulnerability has been identified in the itsourcecode Airline Reservation System version 1.0, specifically within the '/admin/manage_booked.php' file. By manipulating the 'ID' argument, attackers can exploit this vulnerability to execute SQL injection attacks. This means that unauthorized users...

Hikvision network camera devices suffer from an improper authentication vulnerability, which arises when the system fails to adequately authenticate users. This deficiency could enable an attacker to escalate privileges and obtain sensitive information, risking the integrity and confidentiality o...

A notable vulnerability exists within the SourceCodester Online Food Ordering System 1.0 affecting the Category Management component, specifically in the admin/add_category.php file. This vulnerability allows remote attackers to execute arbitrary JavaScript in users' browsers via manipulated inpu...

A vulnerability exists in the OpenPPL CUDA Optimizer within the OptGraph::InitQuantization function, located in src/ppl/nn/engines/cuda/optimizer/opt_graph.cc. This flaw allows an attacker to manipulate parameters such as per_channel, bit_width, tensor_max, tensor_min, and scale, potentially lead...

A vulnerability has been identified in DeepGraphLearning's KnowledgeGraphEmbedding that allows for path traversal through improper handling of the 'data_path' argument in the Checkpoint Loading function (override_config). This weakness can be exploited remotely, leading to unauthorized access to ...

A security vulnerability has been identified in myshell-ai AIlice versions up to 0.4.0, specifically affecting the LoadModel_PEFT function in the HuggingFace Model Wrapper. This vulnerability allows for manipulation of the base_model_name_or_path argument, potentially leading to the execution of ...

A vulnerability has been discovered in the Edge0-AI Audio8_TTS product, specifically within the Model Path Resolution component. The weakness originates from the ArkTtsRuntime.__init__ function in the runtime.py file, which allows attackers to manipulate the 'slow_decode_models' argument. This ma...

A critical access control vulnerability has been identified in InvoiceShelf affecting versions up to 2.4.3 and 3.0.0-alpha.3. The issue stems from inadequate validation in the MemberService::create function found within app/Domains/Accounts/Application/MemberService.php. This vulnerability allows...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability has been detected in Purocean Yank Note version 3.93.0, specifically in the Terminal Handler component's checkPermission function within src/main/server/index.ts. This flaw allows attackers to execute OS commands via remote exploitation, posing significant risks to system integrit...

A vulnerability exists in Purocean Yank Note version 3.93.0, specifically in the Settings Endpoint's config.getAll function located in src/main/server/index.ts. This vulnerability leads to potential information disclosure, allowing unauthorized access to sensitive data. The issue can be exploited...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A security vulnerability has been identified in the Presenton product, specifically in the JSON.parse function located in the /api/user-config file of the User Configuration Handler component. This flaw allows attackers to perform cross-site request forgery (CSRF) attacks, which can be executed r...

Elo, a functional expression language designed for no-code tools, contains a significant vulnerability that allows attackers to execute arbitrary JavaScript code. Prior to version 1.0.1, the functions within Elo could improperly handle plain strings, leading to unauthorized access to the JavaScri...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability has been identified in the 101arrowz fflate library, specifically in the unzipSync function found in esm/index.mjs. This weakness can lead to memory corruption, which disrupts normal functionality and may be exploited remotely. Publicly available exploit techniques raise concerns ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the Linux kernel that concerns the handling of shared skb fragments during the decryption process in ESP-in-UDP packets. When pages are attached from a pipe directly to an skb using MSG_SPLICE_PAGES, the kernel marked these SKBs with SKBFL_SHARED_FRAG, which plays a cruc...

A command injection vulnerability has been identified in the Edimax BR-6208AC router running firmware version 1.32. This flaw exists within the processing logic of the /goform/mp file, where improper validation allows attackers to execute arbitrary commands remotely. Although the exploit has been...

A SQL injection vulnerability exists in the Campcodes Complete Sales and Inventory System with Credit Management 1.0, specifically within the processing of the /ahira/login.php file. By manipulating the 'branch' argument, an attacker can exploit this issue remotely, potentially compromising the s...

A vulnerability has been identified in the Campcodes Bitcoin Wallet System version 1.0, specifically in the function random_int located in the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This flaw enables an attacker to bypass restrictions on excessive authentication attempt...

A vulnerability exists in the Campcodes Division Regional Athletic Meet Game Result Matrix System, specifically in the check-user.php file, affecting version 2.1 and earlier. This issue allows attackers to manipulate the 'abbr' argument, leading to SQL injection. Since the exploit is publicly ava...

A security flaw has been identified in the file handling functionality of Campcodes Complete Advance Loan Management System 1.0, specifically within the move_uploaded_file function used in /loan/application/banner.php. This vulnerability allows for the unrestricted upload of files, enabling poten...

An SQL injection vulnerability has been discovered in the Requirement Board Update Handler of the krupalshah EmployeeRecruitmentSystem. The flaw resides in the mysql_query function within the script source/reqformprocessing.php. This vulnerability permits an attacker to manipulate queries and pot...

The VitaFit cloud API prior to October 30, 2026, has an authentication bypass vulnerability that enables unauthorized attackers to gain full access to a victim's account session. This issue arises when attackers submit a linked Google or Facebook identifier to the /front/login/sns/ endpoint witho...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in NST Labs Tech Nstbrowser version 1.21.0, impacting the Local Agent API component. This flaw allows for unauthorized access to sensitive information via the /agent/info file. The attack can be executed remotely, promoting risks of data exposure. Despite early notification...

A security flaw has been identified in NSTbrowser up to version 1.2.1, centered around the stopAllBrowsers function in the Local Agent Management Service. This vulnerability allows an attacker to perform remote manipulation, leading to a denial of service condition. The exploit has been publicly ...

A vulnerability exists in the social login flow of 6amTech's 6valley version 16.0, specifically in the existingAccountCheck function located in the /api/v1/auth/existing-account-check endpoint. This vulnerability allows an attacker to manipulate the user_response argument, potentially leading to ...

The Alan: Health Insurance for Android app version 1.450.0 has a vulnerability that enables a malicious co-resident application to exploit the exported ShareReceiverActivity. By manipulating the _display_name value from a shared content URI through a crafted ACTION_SEND intent, attackers can exec...

The s2Member plugin for WordPress contains a vulnerability that allows for Remote Code Execution through the 'item_name' parameter. This vulnerability arises from inadequate sanitization in the strip_php_tags_deep() function, which improperly strips only the literal '<?' sequences. An attacker ca...

The NPC-Worldwide npcpy software, specifically within the MLX Provider component, contains an improper input validation vulnerability in the get_mlx_response function. This flaw allows attackers to manipulate the argument model, potentially leading to unauthorized access or further exploitation. ...

A vulnerability exists in NPC-Worldwide's npcpy software, specifically within the load_sft_model function of the sft.py file. An attacker can manipulate the argument base_model_name_or_path to execute arbitrary code. This exploitation can occur remotely, posing a significant risk to users of the ...

A vulnerability in the Linux kernel's TCP socket management has been identified, allowing for a use-after-free scenario that can impact network security. Specifically, the issue arises when ownership of certain socket options is transferred between parent and child sockets without proper manageme...

A path traversal vulnerability has been identified in the Comfast CF-WR632AX router version 2.6.0.1. This weakness is found within the Multipart Parser of the web management interface, specifically in the file located at /usr/bin/webmgnt. An attacker can exploit this vulnerability by manipulating...

The vtenext application version 25.02 prior to 25.02.1 is susceptible to an authentication bypass vulnerability. This flaw enables unauthenticated attackers to modify any user's password through the endpoint hub/rpwd.php without prior token verification. By exploiting this weakness, attackers wit...

A security vulnerability has been identified in the Linksys E5350 router's Setup Wizard, specifically within the save_settings function of the /wizard/apply.cgi file. This flaw allows an attacker to manipulate the argument wizard_router_pwd, leading to an absence of necessary authentication mecha...

A significant vulnerability exists in the Linksys E5350 router, specifically affecting version 1.0.00.037. The issue lies within the system functionality of the file /wizard/apply.cgi, where improper handling of arguments such as ping_ip and traceroute_ip can lead to OS command injection. This fl...

The UpdraftPlus: WP Backup & Migration Plugin for WordPress has a vulnerability that allows unauthenticated attackers to bypass authentication mechanisms. This occurs due to inadequate validation of remote communications messages in the UpdraftPlus_Remote_Communications_V2::wp_loaded function. At...

A security flaw has been identified in the Linksys WRT54GL 4.30.18 that affects the Traceroute Diagnostic Function through the apply.cgi file. An attacker can exploit this vulnerability remotely by manipulating the 'traceroute_ip' argument, leading to unauthorized OS command execution. It’s impor...

A vulnerability has been discovered in the Linksys WRT54GL router version 4.30.18, where improper handling of the ping_ip argument in the apply.cgi function of the Ping Diagnostic component can lead to OS command injection. This flaw can be exploited remotely, allowing attackers to execute arbitr...

A vulnerability in the yezhihao jt808-server's Web Management API allows for potential exploitation due to missing authentication in the function WebMvcConfig.addInterceptors. This design flaw means that attackers can remotely manipulate the system without proper authentication, leading to unauth...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

IBM Langflow OSS versions 1.0.0 through 1.12.8 are susceptible to a remote code execution vulnerability due to improper control of code generation. This weakness could potentially allow an attacker to execute arbitrary code on the affected systems if exploited. Users are advised to review the ven...

A Path Traversal vulnerability has been identified in the multipart file handling within the AdonisJS framework. This vulnerability could allow an attacker to write arbitrary files to unintended locations on the server's filesystem, potentially compromising the integrity and security of the appli...

The Sudo software, prior to version 1.9.17p1, contains a vulnerability that enables local users to gain root access through improper handling of configuration files. Specifically, when the optional --chroot command is used, the software incorrectly processes the /etc/nsswitch.conf file from a use...