Publicly Disclosed
PoC Exploits

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A security flaw has been identified within the Saruf-Ratul HR-Payroll-Management-System, specifically in the 'chat.php' file. This vulnerability allows an attacker to execute a cross site scripting (XSS) attack by manipulating the argument ID, which could lead to unauthorized access or data manip...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the file chat.php of the MD-MAFUJUL-HASAN Online-Payroll-Management-System, where manipulation of the argument ID can lead to cross site scripting attacks. This flaw allows perpetrators to execute malicious scripts remotely, posing serious security risks for users. Despi...

An authorization bypass vulnerability exists in the Code-Projects Simple Content Management System version 1.0, specifically within the administrative interface found in /web/admin/welcome.php. This vulnerability arises when manipulating the 'addnews' argument, leading to unauthorized actions tha...

A vulnerability exists in the Tencent RapidJSON library, specifically within the Regex Parser component, where the GenericStringStream<UTF8<char>>::Take function in include/rapidjson/stream.h is susceptible to out-of-bounds read operations. This flaw can be remotely exploited, posing a significan...

A vulnerability in GitLab's CI/CD configuration could permit an unauthenticated attacker to execute arbitrary code on the server. This exploit arises from insufficient validation of a specially crafted regular expression. Affected versions include GitLab CE/EE 19.2 prior to 19.2.8, 19.3 prior to ...

An Incorrect Permission Assignment vulnerability exists in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved, specifically impacting the PTX Series. This vulnerability permits unauthenticated network-based attackers to execute code with root privileges. The framework, wh...

Palo Alto Networks Checkov is susceptible to a code execution vulnerability that enables an attacker to execute arbitrary code when the tool scans a directory containing a configuration file under their control. This flaw can expose systems to potential threats, making it crucial for users to ass...

A vulnerability exists in the SourceCodester Online Food Ordering System version 1.0, specifically within the admin/delete_admin.php file. This weakness arises from a missing authentication mechanism related to an unknown function, allowing unauthorized access through manipulation of the ID argum...

A security flaw exists in the SourceCodester Online Food Ordering System's admin/add_food.php file, where improper handling of the 'image' argument allows for an unrestricted file upload. This weakness can be exploited remotely, potentially leading to unauthorized file uploads and subsequent remo...

A path traversal vulnerability exists in the SourceCodester Online Food Ordering System version 1.0, specifically within the unlink function found in admin/delete.php. An attacker can exploit this vulnerability by manipulating the image_name argument, potentially leading to unauthorized file dele...

A vulnerability has been detected in Argilla affecting versions up to 2.8.0. This flaw resides within an unspecified function in the TextField.vue file, where improper handling of user input can lead to cross site scripting (XSS). Attackers can manipulate this entry point remotely to inject malic...

A critical Cross Site Scripting vulnerability exists within Argilla versions up to 2.8.0, specifically in the 'sandbox' component located in the file argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue. This vulnerability is triggered by manipulation of an argumen...

A security flaw has been identified in Argilla versions up to 2.8.0, specifically within the Dataset.from_disk function in the SettingsInfo.vue file of the Settings Page component. This vulnerability allows attackers to manipulate the 'Name' argument, potentially leading to cross site scripting (...

The NXP MCUXpresso SDK USB middleware contains a vulnerability that allows a malicious USB device to exploit a heap buffer overflow in the host audio, video, and CDC class drivers. This security issue arises from insufficient validation of device-supplied parameters, specifically bNumEndpoints an...

Improper handling of error messages in various Zyxel firewall products can enable unauthenticated attackers to send specially crafted packets, potentially allowing the execution of OS commands on the affected devices. This vulnerability can lead to severe implications for network integrity and se...

A security gap in the ESDS Emagic Data Center Management Suite arises from inadequate input sanitization in its Ping component. This flaw enables a remote authenticated attacker to exploit the vulnerability by injecting operating system commands. If successfully executed, this would grant the att...

A command injection vulnerability in Dahua EIMS allows unauthenticated remote attackers to execute arbitrary system commands. This issue arises from inadequate input validation on the captureCommand parameter processed via the capture_handle.action interface. Attackers can exploit this flaw by se...

Ivanti Endpoint Manager Mobile is susceptible to a code injection vulnerability that can enable attackers to conduct unauthenticated remote code execution. This vulnerability poses a significant risk as it allows unauthorized users to execute arbitrary commands on the system, potentially compromi...

Weaver E-cology 10.0 prior to version 20260312 is exposed to an unauthenticated remote code execution vulnerability. This occurs in the /papi/esearch/data/devops/dubboApi/debug/method endpoint, which allows malicious actors to execute arbitrary commands. By crafting specific POST requests with at...

Transmission versions prior to 4.1.3 are vulnerable to a permissive Cross-Origin Resource Sharing (CORS) issue that compromises the X-Transmission-Session-Id anti-CSRF token. This vulnerability allows attackers to access the token via malicious web pages, enabling them to hijack RPC calls. Conseq...

Eclipse Jetty versions 9.4.37.v20210219 to 9.4.38.v20210224 contain a vulnerability where default compliance mode permits URI requests that include '%2e' or '%2e%2e' segments. This flaw enables unauthorized access to protected resources, particularly files located within the WEB-INF directory, su...

A vulnerable function in the Device-Information CGI of the TOTOLINK A950RG router allows for a stack-based buffer overflow when an attacker manipulates the CONTENT_LENGTH argument. This flaw poses a significant risk as it can be exploited remotely, enabling attackers to execute arbitrary code or ...

An information disclosure vulnerability exists in the TOTOLINK A950RG router, specifically in the getLanguageCfg function of the global.so file. This flaw allows an attacker to manipulate the token argument, potentially exposing sensitive information. The vulnerability can be exploited remotely, ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the TOTOLINK A950RG router's firewall module, specifically in the apmib_set function. This weakness allows an attacker to perform command injection attacks, potentially leading to unauthorized commands being executed with elevated privileges. The issue can be exploited r...

A command injection vulnerability exists in the TOTOLINK A950RG router, specifically in the getDeviceInfo function located in the /var/lib/misc/udhcpd.leases file. This flaw arises from improper handling of the MAC address argument, enabling attackers to execute arbitrary commands on the device r...

A vulnerability exists in the TOTOLINK A950RG router's Cloud Upgrade component, specifically in the 'setCloudUpgradeFW' function found in the 'lib/cste_modules/upgrade.so' file. This issue allows an attacker to manipulate the 'FileName' argument, potentially leading to command injection. Such an ...

A vulnerability exists in the online clinic management system that allows for cross-site scripting via the 'patientregistration.php' file. Malicious manipulation of the 'pat_name' argument can be exploited remotely, posing a security risk to users. The product has not been formally versioned, mak...

Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. Versions prior to 0.4.0, when used to render user-supplied input in AsciiDoc markup, may allow an attacker to execute arbitrary system commands on the host operating system. This attack is possible ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A security flaw has been identified in BKWLD Decoy, specifically affecting its Authorization Policy through a vulnerability in the Policy.php file. The flaw arises from inadequate privilege management, allowing unauthorized manipulation of the 'role' argument. This vulnerability can be exploited ...

A business logic vulnerability exists in the Omega Solution Restro POS system, specifically within the sale-invoice function. This flaw allows an attacker to manipulate the productUnitSalePrice argument, which can lead to unintended business logic errors. The exploit is executable remotely, posin...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability in Bdtask Garage 24 Garage Management Software 1.0 allows for cross site scripting (XSS) through improper processing of the 'first_name' and 'last_name' arguments in the /edit_profile file of the Profile component. This can be exploited remotely, posing a risk to users' data integ...

A notable weakness has been detected in the Backend of Bdtask Garage 24 Garage Management Software version 1.0. This vulnerability allows for improper authorization, which can be exploited remotely. Attackers can manipulate this flaw to gain unauthorized access to restricted areas of the software...

A security flaw in 2K Games Sid Meier's Civilization IV has been identified, specifically in the loadstring function within the Lua sandbox component. This vulnerability allows for type confusion attacks, enabling potential exploitation. If executed, attackers may manipulate this flaw remotely to...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A vulnerability has been discovered in iFlytek's astron-agent, affecting versions 1.1.1 and 1.1.2. The flaw lies within the FileInfoV2Service.listKnowledgeByPage function in the FileInfoV2Service.java component. This vulnerability allows unauthorized access through manipulation of the 'space-id' ...

A vulnerability has been discovered in iFlytek's astron-agent, affecting versions 1.1.1 and 1.1.2. The flaw lies within the FileInfoV2Service.listKnowledgeByPage function in the FileInfoV2Service.java component. This vulnerability allows unauthorized access through manipulation of the 'space-id' ...

The TTLock Android application prior to version 9.8.260718, along with its associated smart-lock firmware, features a serious flaw due to a hardcoded static AES key. This vulnerability permits attackers within Bluetooth range to exploit the system by decrypting the per-pairing session key exchang...