Publicly Disclosed
PoC Exploits

A vulnerability exists in the Tenda BE3L Pro router affecting version 16.03.60.62, specifically in the formWifiBasicSet function within the /goform/WifiBasicSet file. This security flaw can be exploited remotely by manipulating the security_5g argument, leading to a potential buffer overflow. As ...

A significant vulnerability has been identified within the SourceCodester Food Order Management System 1.0, specifically affecting the Admin Endpoint component. This flaw allows for unauthorized access due to missing authorization controls, enabling remote attackers to manipulate the system witho...

A security flaw exists in the ProjectWorlds Advanced Library Management System version 1.0, specifically within the mysqli_query function of profile.php. This vulnerability arises from improper handling of the admin_id parameter, allowing attackers to execute arbitrary SQL commands through remote...

A vulnerability has been discovered in the ProjectWorlds Advanced Library Management System 1.0, specifically within the mysqli_query function in the returned_book_search.php file. This flaw allows an attacker to manipulate the input arguments datefrom and dateto to execute SQL injection attacks....

A vulnerability has been identified in the ProjectWorlds Advanced Library Management System, specifically in the edit_member.php file. This security flaw allows attackers to manipulate the input fields such as firstname, middlename, lastname, address, branch, and type, leading to SQL injection at...

A security flaw exists in ProjectWorlds Advanced Library Management System version 1.0, specifically within the mysqli_query function in individual_report_search.php. By manipulating the roll_number argument, a remote attacker can execute arbitrary SQL queries, potentially leading to unauthorized...

A vulnerability is present in MomoTommy's File Management System due to improper handling in the 'store' function of FileController.php. This flaw allows for unrestricted file uploads, potentially enabling remote attackers to upload malicious files without authentication. The issue was previously...

A missing authentication vulnerability exists in the MomoTommy file-management-system, specifically within the Files API. The flaw is located in the FileController.php of the component responsible for managing file operations. An attacker could take advantage of this vulnerability to manipulate t...

The Girafit camera app, available for both Android and iOS, along with Girafit camera devices, features a security flaw related to hardcoded credentials. Attackers can leverage this vulnerability by decompiling the app or monitoring unencrypted network traffic during live view registration. As a ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A critical vulnerability has been identified in the oretnom23 file-management-system-php, specifically within the delete_folder function of the ajax.php component. This flaw allows an attacker to manipulate the ID argument, resulting in a lack of required authentication when executing file deleti...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A security flaw has been identified in the oretnom23 file-management-system-php, specifically within the save_files function located in the admin_class.php file. The vulnerability allows for unrestricted file uploads by manipulating the Upload argument, which can be exploited remotely. The issue ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the oretnom23 File Management System's files.php component, where improper validation of the fid/id argument can lead to SQL injection. This issue allows attackers to manipulate input, executing arbitrary SQL statements remotely. The vulnerability has been publicly discl...

A security issue has been identified within the oretnom23 File Management System, specifically affecting the `readfile` function in the `download.php` component. This flaw arises from improper handling of the ID argument, enabling attackers to potentially execute SQL Injection attacks remotely. T...

A SQL injection vulnerability has been identified in the admin_class.php component of the oretnom23 File Management System. The flaw exists within the functions handling folder and file operations, allowing an attacker to manipulate arguments such as name, parent_id, id, type, folder_id, and desc...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A security flaw has been identified in the oretnom23 file-management-system-php, specifically affecting the user account management component in the admin_class.php file. The vulnerability arises from improper handling of user input within the save_user function, allowing attackers to manipulate ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the oretnom23 file-management-system-php, particularly within the Login function of admin_class.php. This flaw allows for SQL injection through manipulation of the username and password arguments. The potential for remote exploitation is a significant concern, as an atta...

A vulnerability exists in the oretnom23 file-management-system-php that affects the index.php file. This weakness allows attackers to manipulate the 'page' argument, potentially leading to unauthorized file inclusions. Since the vulnerability can be exploited remotely, it poses a significant risk...

A specific SQL injection vulnerability exists in the Itsoursecode Sales-and-Inventory-System, particularly in the unvalidated argument ID within the cust_searchfrm.php script. This flaw can be exploited remotely, allowing attackers to manipulate SQL queries, leading to unauthorized access to sens...

A vulnerability in the itsourcecode Sales-and-Inventory-System affects an unknown function within the /pages/cust_del.php file. This issue permits attackers to manipulate the 'ID' argument, leading to SQL injection attacks that can be exploited remotely. It is important to note that the affected ...

A vulnerability has been identified in the itsourcecode Sales-and-Inventory-System that allows for SQL injection through improper handling of the ID parameter in the /pages/cust_edit.php file. This flaw can lead to unauthorized access to and manipulation of the underlying database, potentially co...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the dhikshitha29 Insurance Management System affecting the Policy Holder Update Form. This issue arises from improper authorization handling in the file /Agent/includes/UpdatePolicyHolder-inc.php when manipulating the Policy_no argument. The flaw allows unauthorized user...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A notable security issue has been identified in the Plan Management Form of the dhikshitha29 Insurance-Management-System, specifically within the file AddNewPlan-inc.php. This vulnerability allows for manipulation of critical arguments related to plan submission, leading to potential unauthorized...

A vulnerability has been detected in the dhikshitha29 Insurance Management System, specifically in the Add New Admin Form component. The weakness resides in the /Admin/includes/Admin-Register-inc.php file, where manipulation of the submit/Admin_id/password arguments may lead to improper authoriza...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A security vulnerability has been identified in the dhikshitha29 Insurance-Management-System, specifically within the 'EditPolicyHolder.php' file. This flaw affects the 'mysqli_query' function, where an attacker can manipulate parameters such as 'Policy_no' or 'Name' to execute unauthorized SQL q...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A security vulnerability has been identified in the dhikshitha29 Insurance Management System, specifically within the 'editPlan.php' file. This flaw resides in the 'mysqli_query' function where an attacker can manipulate the 'Plan_no/Name' parameters to execute SQL injection attacks remotely. The...

The PeachPay for WooCommerce plugin, present in all versions up to and including 1.120.46, is susceptible to Cross-Site Request Forgery (CSRF) due to inadequate nonce validation in the peachpay_stripe_handle_admin_actions function. This flaw allows unauthorized attackers to exploit CSRF, enabling...

FUEL CMS version 1.4.1 is susceptible to a significant vulnerability that allows for PHP code execution. By manipulating the 'pages/select/' filter parameter or the 'preview/' data parameter, an attacker can execute arbitrary PHP code remotely without authentication. This flaw poses a severe risk...

An authentication bypass vulnerability exists in Microsoft Exchange Server, allowing authorized attackers to perform capture-replay attacks that can lead to elevated privileges on a network. This security issue highlights the importance of securing authentication mechanisms to prevent unauthorize...

The Jane Menu WordPress plugin prior to version 1.5.1 lacks proper capability and nonce checks in one of its form handlers. This vulnerability allows unauthenticated users to bind any published page to a remote document of their choice. Once bound, the plugin retrieves this document and injects i...

The HappyForms WordPress plugin version earlier than 1.26.15 has a security flaw where it fails to properly sanitize or escape user-controlled referral values. This oversight allows unauthenticated attackers to inject arbitrary HTML code into the form notification emails sent to site administrato...

The LatePoint plugin for WordPress prior to version 5.7.5 contains a significant input validation flaw. This vulnerability allows an unauthenticated visitor to manipulate the client-supplied booking charge parameters, potentially lowering the amount due to zero. As a result, the attacker can secu...

The Contest Gallery WordPress plugin prior to version 34.0.1 suffers from an improper authentication vulnerability that fails to adequately verify user identities for voting. By trusting client-supplied request headers and an unbounded client-generated token, the plugin allows unauthenticated use...

The Simple Shopping Cart plugin for WordPress, prior to version 5.3.3, features a security flaw that allows users with the Contributor role or higher to submit arbitrary product prices. This vulnerability arises from the plugin's failure to validate submitted prices against a predetermined value,...

The Simple Shopping Cart plugin for WordPress, prior to version 5.3.3, lacks essential verification of PayPal payment notifications. This oversight allows unauthenticated users to mark their fraudulent orders as paid by exploiting the system's default settings, which do not validate that payments...

The Payment Gateway for Telcell WordPress plugin prior to version 2.0.5 fails to verify the authenticity of incoming payment notifications due to an empty default secret used for signing. This flaw enables unauthenticated attackers to craft valid notifications, which may lead them to incorrectly ...

The CMP – Coming Soon & Maintenance plugin for WordPress fails to correctly enforce maintenance mode for pages that have been added to a whitelist via manually entered URL patterns. This flaw allows unauthenticated users to access and view content on these pages even when maintenance mode is acti...

An out-of-bounds write vulnerability has been identified in Apple's operating systems, potentially allowing attackers to execute arbitrary code through specially crafted files. Affected systems include earlier versions of iOS, iPadOS, and specific macOS versions. Apple has implemented improved bo...

Dokploy, a self-hostable Platform as a Service (PaaS), is affected by a vulnerability that stems from an incomplete fix related to input validation in its version management. Specifically, in versions 0.29.3 to 0.29.12, the application fails to properly validate branch fields during requests to c...

The Cart Abandonment Recovery for WooCommerce plugin prior to version 2.2.0 lacks proper verification of its cart-recovery token, allowing unauthenticated attackers with knowledge of a victim's cart session identifier to modify abandoned-cart records. This includes actions such as unsubscribing u...

The Click n Chat plugin for WordPress, prior to version 1.1.3, lacks proper authorization checks on a lead-export handler. This oversight permits unauthenticated users to access and download sensitive information such as contact names, email addresses, and phone numbers. As a result, this vulnera...