Publicly Disclosed
PoC Exploits

A vulnerability exists in Apache Camel where improper handling of code generation can lead to code injection and expression language injection. This affects versions of Apache Camel between 4.4.0 and 4.18.5, as well as between 4.19.0 and 4.22.1. The Dynamic Router Control endpoint allows maliciou...

A vulnerability exists in Webkul Aureus ERP affecting versions up to 1.6.0, specifically within the UserForm.php file located in the security plugin. This flaw allows for the manipulation of the Password argument, leading to weak password requirements that could be exploited remotely. Though the ...

A security vulnerability in Webkul Aureus ERP versions up to 1.6.0 allows for remote manipulation of the composer.json file, which may lead to the injection of sensitive information into debugging output. This could create pathways for unauthorized users to access sensitive data, thereby exposing...

A Server-Side Request Forgery (SSRF) vulnerability exists within the Apache Camel AS2 component, allowing an attacker to exploit a misconfiguration in message handling. Specifically, when sending a Message Disposition Notification (MDN), the AS2 component would take the destination address direct...

A vulnerability in JumpServer versions prior to 5.0.0 allows for OS command injection through the Template Rendering component. By manipulating the IP/HOST argument, an attacker can execute remote commands, potentially leading to unauthorized access and system compromise. Users are urged to upgra...

A vulnerability in MemTensor's memmy-agent, specifically within the Memory Service component, allows unauthenticated remote access to the function requireAdminWrite. This weakness can lead to resource consumption, potentially resulting in a denial-of-service condition. Although the endpoint expos...

A vulnerability has been identified in the vraj404 Criminal-Management-System affecting the Officer Registration Form. This vulnerability allows an attacker to exploit the mysqli_error function within the addOfficer.php file. The manipulation of key input arguments such as offName, offID, ID, con...

A security vulnerability has been identified in the vraj404 Criminal-Management-System, specifically in the Search Page component due to improper handling of user input in the mysqli_query function within the Officers/searchOff.php file. This vulnerability allows remote attackers to manipulate th...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

The Cockpit web application in Camunda suffers from an authorization bypass vulnerability, where authenticated attackers can exploit inverted logic in the permission check function. This flaw allows them to gain unauthorized access to sensitive data such as process instances and definitions, as w...

Camunda versions prior to 7.24.14 and 7.23.17 are susceptible to an expression injection vulnerability associated with the AdhocQueryValidator. This weakness allows authenticated users to bypass restrictions set for expressions in adhoc queries by manipulating the orQueries field in TaskQueryDto....

Authored in versions 7.24.0 through 7.24.14 and 7.23.0 through 7.23.17, this vulnerability in Camunda's engine REST API permits authenticated attackers lacking permission grants to access sensitive task comments and attachments. Attackers can exploit specific endpoints like getAttachment, getAtta...

A SQL injection vulnerability has been detected in the vraj404 Criminal Management System, specifically within the 'Submission Form' component of the file home.php. By manipulating input parameters such as id, name, and address, attackers can execute unauthorized SQL commands. This vulnerability ...

A significant security flaw has been identified in the vraj404 Criminal-Management-System, specifically within the 'search.php' file. This vulnerability allows the manipulation of the 'Search' argument, which can lead to SQL injection attacks. The flaw enables remote attackers to execute unauthor...

A security flaw has been found in the vraj404 Criminal Management System, specifically in the 'move_uploaded_file' function located in home.php. This vulnerability enables attackers to manipulate the 'my_img' argument, leading to unrestricted file uploads. Such a weakness allows for potential rem...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

An information disclosure vulnerability has been identified in ai-genius-automations Octoally, specifically within an unknown function located in server/src/index.ts. By manipulating the argument path, an attacker could expose sensitive information, potentially leading to unauthorized access. Thi...

A vulnerability in the Linux kernel's IPv4 stack involves improper validation of checksum metadata, allowing packets with bad checksums to enter the system. This can lead to corruption of the network header through the skb_checksum_help function, potentially resulting in unpredictable behavior an...

A vulnerability has been identified in D-Link E15, M32, R15, and R32 devices, specifically affecting the MQTT Broker component. This issue arises from the processing of the file /etc/emDaemon/passwd, leading to the presence of hard-coded credentials. The vulnerability enables attackers to exploit...

A security vulnerability in Speaches-AI's Speaches software allows remote attackers to manipulate function arguments in the Pyannote Diarization Model, specifically in the PyannoteDiarizationModelManager._load_fn method. This flaw exposes the functionality to receive externally-controlled inputs ...

A file access vulnerability has been discovered in the Events Management System by satya-vinay, affecting all versions up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This vulnerability allows an attacker to manipulate the project.sql file, potentially exposing sensitive files or directories to u...

A security flaw has been identified in the satya-vinay Events-Management-System which allows for missing authentication in certain functionalities. This vulnerability can be exploited remotely, providing attackers potential unauthorized access to sensitive elements of the system. The product empl...

The satya-vinay Events-Management-System is vulnerable to an SQL injection due to improper handling of input in the dodelete.php file associated with the Registration-Delete Handler component. An attacker can exploit this vulnerability remotely by manipulating the ID argument, allowing unauthoriz...

A vulnerability exists in the Events-Management-System developed by satya-vinay where the 'Registration-Edit Handler' component within the doedit.php file is susceptible to SQL injection. This issue arises from inadequate validation of user input parameters—specifically id, name, title, year, gen...

A code injection vulnerability has been identified in the llSourcell Doctor-Dignity product, specifically in the _get_lib_module function located in python/mlc_chat/chat_module.py. This weakness allows for the manipulation of the model_lib argument, potentially enabling attackers to execute arbit...

A SQL injection vulnerability has been identified in the subhajitkhan online clinic management system within the Administrative Mutation Handler component. Specifically, an unknown function in the admindocview.php file is susceptible to manipulation of the docid argument, allowing remote attacker...

A vulnerability exists in the Diem Project's dmCodeEditor component up to version 5.1.3, specifically in the function dmOs::join within actions.class.php. This flaw allows for path traversal manipulation, enabling remote attackers to access unauthorized files on the system. The issue was reported...

A vulnerability has been identified in the ztxz16 fastllm product affecting versions up to 0.1.8.2. This flaw resides within the function GGUFBuffer::ReadString located in the file third_party/gguf/gguf.cpp. The issue arises from improper handling of the argument 'len', leading to a potential buf...

A vulnerability exists in the ztxz16 fastllm component, specifically within the Safetensors Weight Loading due to improper handling of the 'data_offsets' argument in the CreateBuffer function of model.cpp. This flaw can lead to a buffer overflow, allowing for potential remote exploitation. The is...

A security flaw has been identified in AXA Group's NLP.js version 4.27.0, specifically within the Evaluator.walkFunction method located in the Condition Expression Pipeline. This issue allows attackers to manipulate the condition argument, potentially leading to remote code execution. Despite ear...

A vulnerability exists in the WebSocket Gateway of BlackBeltTechnology's pi-agent-dashboard, specifically affecting versions up to 0.8.0. This issue arises from improper handling of the 'cwd' argument, allowing potential attackers to bypass origin validation checks. This flaw can be exploited rem...

A code injection vulnerability exists in the DeepPavlov library, specifically in the MultiTaskPipelinePreprocessor.__init__ method. This issue can be exploited remotely due to improper handling of the preprocessor argument in multitask_preprocessor.py. Public disclosure of this vulnerability indi...

A vulnerability has been identified in DeepPavlov, affecting versions up to 1.7.0, specifically in the `resolve` function within the `deeppavlov/core/common/params.py` file of the Config Reference Resolver component. This flaw allows for code injection, potentially enabling unauthorized remote co...

This vulnerability in the Linux kernel arises from a race condition in the memory management subsystem, specifically within the slab allocator. The issue occurs because certain assumptions about the state of the slab list can lead to memory corruption when an object is freed while another CPU sim...

A vulnerability exists in the Linux kernel due to the tight coupling of scheduling statistics with memory management structures. This architectural design flaw can lead to a use-after-free condition during task context switching. When a task switches its memory management (mm), another CPU might ...

A vulnerability in the Linux kernel's futex implementation may lead to a race condition affecting memory management. The issue arises when a multi-threaded application uses vfork and creates a scenario where two processes attempt to allocate a futex hash table concurrently. If both processes invo...

A vulnerability has been identified in the Linux kernel's memory management subsystem, specifically relating to improper handling during the page walk process. If the page middle directory (PMD) entry is cleared while the walk operation is retried, it may lead to erroneous states, causing walk ca...

A vulnerability has been identified in the Linux kernel related to signal queueing during the exec() process. Specifically, race conditions can lead to use-after-free scenarios within the signaling mechanism, potentially allowing exploitation during instances when tasks are transitioning due to e...

A critical security flaw exists in the SourceCodester Inventory System 1.0, specifically within the Purchase Records Handler component located at /api/transactions_handler.php?action=save_purchase. This vulnerability permits an attacker to manipulate parameters such as Product_Name, Product_Code,...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A vulnerability exists in the SourceCodester Inventory System 1.0 that allows for cross site scripting through the manipulation of the Product_Id or Product_Name parameters in the /api/products_handler.php?action=save endpoint. This flaw can be exploited remotely, allowing attackers to execute ar...

A vulnerability has been found in mxml versions 4.0.5 and 4.0.6, specifically affecting the mxml_load_data function in mxml-file.c. This issue can result in a use after free condition which may be exploited remotely. The vulnerability has been publicly disclosed, posing a risk of exploitation. De...

A cross site scripting vulnerability exists in the feedback.php file of the subhajitkhan online-clinic-management-system up to a specific commit hash. This issue arises when the msg argument is manipulated, allowing attackers to execute malicious scripts in the context of a user's session. The vu...

A vulnerability has been identified in the Subhajitkhan Online Clinic Management System involving the 'doctorregistration.php' file. The flaw exists in the 'echo' function of the Doctor Registration component, which processes user input without proper validation. An attacker can exploit this by m...

A security flaw in the Dav-ee dairy-management-system has been detected, specifically within the AJAX Endpoint component. An improper manipulation of the 'fname' argument in the delivery/checkfarmer.json.php file raises concerns about potential information disclosure, allowing unauthorized access...

A vulnerability in the Dav-ee dairy-management-system has been identified, allowing for SQL injection through improper handling of the mysqli_real_escape_string function within payment/pay.php. An attacker can exploit this vulnerability remotely by manipulating the f_no/farmer argument, potential...

The App Builder WordPress plugin version prior to 5.7.1 is vulnerable due to its failure to enforce authentication and authorization processes. This weakness allows attackers to inject malicious data into the plugin options. Subsequently, the plugin may redirect users to arbitrary URIs crafted fr...

The Snap Finance WordPress plugin prior to version 3.12.0 contains a vulnerability that allows unauthenticated users to alter the status of WooCommerce orders. This weakness arises from insufficient verification of the source of requests to modify order statuses, enabling attackers to either mark...

The TrueBooker plugin for WordPress, prior to version 1.3.0, lacks proper authorization checks in several of its functionalities. This security oversight enables unauthenticated users to create and alter booking services and categories, including the manipulation of associated prices, which could...

The TrueBooker WordPress plugin, prior to version 1.3.0, has a vulnerability due to insufficient authorization checks in certain AJAX actions. This weakness enables unauthorized users to create bookings without proper validation of the service price on the server-side. As a result, users can mani...