Publicly Disclosed
PoC Exploits

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

NetAlertX, a network and presence scanning solution, has a vulnerability that allows attackers to bypass the authentication mechanism prior to version 25.4.14. This vulnerability permits unauthorized individuals to manipulate settings by sending arbitrary requests to the system, specifically targ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in InternScience's InternAgent version 1.5.0, specifically within the LoRA Loading component of the AutoChem module. The flaw arises from an improper handling of the base_model_name_or_path argument in the train function, which allows for the inclusion of functionality from...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

The WPVR WordPress plugin prior to version 9.0.3 fails to adequately sanitize and escape certain tour hotspot contents before storing and rendering them on the front end. This oversight enables users with the Contributor role and above to execute Stored Cross-Site Scripting (XSS) attacks, potenti...

The GeoDirectory plugin for WordPress prior to version 2.8.194 lacks proper verification checks for ownership of listings submitted by users who are not logged in. This oversight allows unauthenticated attackers to gain the ability to modify, unpublish, attach images to, or reassign ownership of ...

The GeoDirectory WordPress plugin prior to version 2.8.194 contains a security flaw where administrator-defined text isn't properly escaped before being written into a generated PHP file. This misconfiguration allows users with elevated privileges, like subsite administrators in a multisite setup...

The GeoDirectory plugin for WordPress, prior to version 2.8.194, contains a vulnerability that fails to properly sanitize and escape certain attributes of its map shortcode. This oversight allows users with Contributor privileges and above to conduct Stored Cross-Site Scripting (XSS) attacks. The...

A serious flaw in the GeoDirectory plugin for WordPress allows unauthenticated users to access confidential listing information. Specifically, the plugin fails to verify ownership or status when displaying map popups via its single-item REST routes. This oversight permits unauthorized individuals...

The GeoDirectory WordPress plugin allows users with Subscriber-level access and above to exploit a flaw due to insufficient validation of user-supplied image URLs. This can result in the ability to read files from outside the intended web root and potentially lead to the deletion of files on the ...

The GeoDirectory plugin for WordPress, prior to version 2.8.194, contains an access control vulnerability where unauthenticated users can exploit an AJAX handler to access non-public listings. This flaw permits the disclosure of sensitive content, such as draft, pending, and private listings, sim...

The GeoDirectory plugin for WordPress, prior to version 2.8.194, is susceptible to an access control vulnerability. This issue arises because the plugin fails to verify the ownership of attachments associated with listings. As a result, users with Subscriber-level access or higher can alter attri...

A security oversight in the News Kit Addons for Elementor plugin allows authenticated users with at least subscriber-level permissions to exploit an AJAX action. The plugin fails to verify user capabilities effectively, which could lead to unauthorized installation and activation of plugins from ...

The Download Monitor plugin for WordPress, prior to version 5.3.4, is susceptible to a Cross-Site Scripting (XSS) vulnerability. This occurs due to improper validation when a user clicks on a link within the plugin. An unauthenticated attacker can exploit this flaw to inject arbitrary JavaScript ...

The News Kit Addons For Elementor WordPress plugin, up to version 1.4.7, has a serious authorization flaw that fails to perform essential capability and ownership checks during an authenticated AJAX action. This vulnerability enables users with as little as subscriber-level access to modify post ...

The Pixel Tag Manager for WooCommerce WordPress plugin versions prior to 2.2.3 contain a vulnerability that lacks adequate capability checks in one of its AJAX actions. This oversight allows harmful interactions by users with low-level roles, such as Contributors, who can exploit the weakness to ...

The asVereinbase WordPress plugin prior to version 1.1.8 contains a security flaw that allows attackers to bypass user authentication. The plugin allows empty stored values to authenticate, enabling unauthorized access to user accounts, including administrative accounts. This vulnerability highli...

The Advanced Twenty Seventeen WordPress plugin prior to version 1.3.1 lacks proper capability checks or nonce verification when creating and activating its bundled child. This vulnerability enables any authenticated user, including users with minimal privileges like subscribers, to change the sit...

The MAS Videos WordPress plugin prior to version 1.3.4 contains an access control vulnerability that enables any authenticated user, regardless of their role, to delete videos, playlists, and other content that belong to different users. This occurs because the plugin does not implement proper ch...

The Front End Users WordPress plugin, up to version 3.2.35, contains an access control vulnerability that fails to limit the account attributes a visitor can modify during front-end registration. This allows unauthenticated users to assign themselves arbitrary membership levels, circumventing est...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

An integer overflow vulnerability exists in GitLab CE/EE that may allow an unauthenticated attacker to execute arbitrary code on the GitLab server. This issue affects all versions from 7.0 prior to 18.11.13, 19.0 prior to 19.0.10, and other specified versions up to 19.5.1. The exploitation arises...

A vulnerability has been identified in the API session-based authentication management of Cisco Catalyst SD-WAN Manager, which could permit an unauthenticated remote attacker to gain access to the affected system as an admin user. This issue arises from improper URI encoding handling within an HT...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

An improper limitation of a pathname in Fortinet FortiSIEM 7.5.0 creates a path traversal vulnerability. This flaw enables attackers to craft malicious packets that can execute unauthorized commands or code within restricted directories, potentially compromising system integrity.

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

In certain versions of PHP, particularly 8.1.*, 8.2.*, and 8.3.* running on Windows with Apache and PHP-CGI, a vulnerability arises when specific code pages are configured. This results in Windows utilizing 'Best-Fit' behavior to handle character replacements for command-line inputs aimed at Win3...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability in PHP allows for the possibility of remote code execution due to improper management of global state that can reference freed memory. In certain scenarios, the global state retains stale information from previous requests, potentially enabling an attacker to execute arbitrary cod...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

The OpenAPI TypeScript Codegen tool, specifically version 0.31.0, is susceptible to a code injection vulnerability. Attackers can manipulate the OpenAPI document to inject malicious JavaScript. This occurs when supplied unescaped values are interpolated into single-quoted string literals, impacti...

A vulnerability in PHP allows for the possibility of remote code execution due to improper management of global state that can reference freed memory. In certain scenarios, the global state retains stale information from previous requests, potentially enabling an attacker to execute arbitrary cod...

A vulnerability has been identified in the Kakao khaiii software prior to version 0.4, specifically concerning the function khaiii::nn::Linear::open within the JSON Config File Handler. This flaw arises from the improper handling of the hidden_dim/class_num argument, resulting in potential out-of...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Certain implementations of Go rely on system root certificates, but in some scenarios, updates to the system trust stores may not occur automatically. This oversight can expose the application to security risks, as known intermediate certificates that are deemed untrustworthy may still be used. T...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A path traversal vulnerability exists in the load_model function of the Convertor component in UbiquitousLearning's mllm, affecting versions up to 2.0.2. An attacker can exploit this vulnerability by manipulating the shard_file argument to access unauthorized files on the file system. This issue ...