Publicly Disclosed
PoC Exploits

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the ngx_http_rewrite_module of NGINX Plus and NGINX Open Source, triggered when a rewrite directive is followed by an if or set directive that includes a Perl-Compatible Regular Expression (PCRE) capture and a replacement string with a question mark. Attackers can exploi...

A race condition has been identified in the File Upload component of HaschekSolutions PictShare, specifically in the architect function within src/inc/core.php. This vulnerability allows an attacker to manipulate the file upload process remotely, posing significant security risks. While exploitin...

A vulnerability exists in the Web Inspector component of the libimobiledevice library, specifically in the webinspector_receive_with_timeout function within src/webinspector.c. This flaw allows for a heap-based buffer overflow, enabling a potential attacker to execute arbitrary code remotely. The...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability in PHP allows for the possibility of remote code execution due to improper management of global state that can reference freed memory. In certain scenarios, the global state retains stale information from previous requests, potentially enabling an attacker to execute arbitrary cod...

A security flaw exists in the BillaBear Installation Handler, specifically in the processInstall function located in the InstallController.php file. This vulnerability permits an attacker to manipulate the installation process due to a lack of proper authentication, leading to potential unauthori...

A server-side request forgery (SSRF) vulnerability affects the image function in the Show.php file of the Mp Module Media Proxy in geesondog RhaPHP, where manipulation of the URL argument could lead to unauthorized server requests. This vulnerability can be exploited remotely, and has gained publ...

A security vulnerability exists in the PGYER Codefever application, specifically in the URI Sanitizer component. The issue lies in the _detail function within the doc.php file, where improper handling of the uri_string argument can lead to path traversal attacks. This flaw allows an attacker to m...

A vulnerability exists in rathena FluxCP affecting the PayPal IPN Handler, specifically in the function responsible for verifying IP ranges. The issue stems from improper validation of the X-Real-IP argument, resulting in an origin validation error. This flaw can be exploited remotely, allowing a...

A CRLF injection vulnerability exists in the Oray Pugongying X5 Pro router version 7.6.1, linked to the Dnsmasq component. This flaw allows for malicious input manipulation, enabling attackers to carry out remote exploits. The vulnerability has been publicly disclosed, and the vendor has yet to r...

A vulnerability exists in the Oray Pugongying X5 Pro version 7.6.1, specifically within the plugin_init function in the file located at /tmp/upload_files for the PPPoE WAN Setting Handler. This vulnerability allows for the manipulation of the pppd_options argument, which results in unrestricted f...

A security flaw has been identified in the Oray Pugongying X5 Pro Router 7.6.1, primarily residing in the L2TP authentication feature. The vulnerability allows attackers to manipulate the Username argument, leading to CRLF injection, which can be exploited remotely. Despite early notification, th...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A CRLF injection vulnerability has been identified in the Oray Pugongying X5 Pro, specifically within the IPsec Policy Handler component. This flaw allows an attacker to manipulate the secproto argument in the /etc/ipsec.conf file, which can lead to unauthorized actions when exploited. The vulner...

A security vulnerability has been identified in the Oray Pugongying X5 Pro version 7.6.1, specifically affecting the Dnsmasq component. This flaw arises from improper handling of the 'rent_time' argument, which can lead to CRLF injection. Through this vulnerability, attackers can exploit the devi...

A vulnerability has been identified in Oray Pugongying X5 Pro 7.6.1, specifically in the snmp_set function of the SNMP Handler. This vulnerability allows an attacker to manipulate the argument 'info.community', which can lead to CRLF injection attacks. The exploitation of this vulnerability can b...

A security flaw has been identified in the Oray Pugongying X5 Pro Router, specifically within the Ser2net component. The vulnerability arises from improper handling of input, allowing attackers to manipulate the 'regmsg' argument, resulting in CRLF injection. This flaw can be exploited remotely, ...

A vulnerability has been identified in FFXIV Teamcraft in versions up to 11.4.31 due to improper handling within the clipboard.readText function found in apps/electron/src/preload.ts. This issue allows attackers to exploit cross-site scripting, which can be executed remotely. The risk stemming fr...

The Eurobank WooCommerce Payment Gateway plugin for WordPress, up to version 2.1.1, is vulnerable due to a failure to validate payment-confirmation requests properly. The plugin does not confirm that incoming requests genuinely originate from the payment provider and comes with an uninitialized a...

The GiveWP WordPress plugin, versions prior to 4.19.0.1, exhibits a critical flaw in its donation processing system. This vulnerability permits unauthenticated users to bypass defined payment limits by allowing donations under the configured minimum amounts. By not adequately restricting the curr...

A vulnerability discovered in the 777genius agent-teams-ai product affects the function doStart located in the src/main/services/infrastructure/HttpServer.ts file. This flaw results in missing authentication for the Local HTTP Service, which could allow unauthorized users with local access to exp...

A cross site scripting (XSS) vulnerability exists in the Edimax BR-6208AC router, specifically affecting the Virtual Server Page component in version 1.32. This vulnerability allows attackers to exploit the system remotely by injecting malicious scripts, which could lead to unauthorized actions o...

A vulnerability exists in the fr0tt benotes application, specifically in the Bookmark Metadata Endpoint's getUrlInfo function located in PostController.php. This flaw allows an attacker to manipulate the URL argument, resulting in potential server-side request forgery (SSRF) attacks. The exploita...

A vulnerability has been identified in the icret EasyImage application, specifically in the app/del.php file. By manipulating the argument hash, an attacker can exploit this flaw, leading to improper privilege management. This issue is critical as it allows for remote execution of attacks, potent...

The CCAvenue Payment Gateway for WooCommerce plugin fails to confirm the authenticity of payment-confirmation requests from the payment provider. This vulnerability arises because the verification key used in the payment process is derived from an empty value during standard installations. As a r...

The Payment Gateway WordPress plugin, in versions up to 2.2.0, fails to enforce configuration of a shared secret for authenticating bank payment-notification callbacks. This oversight enables unauthenticated attackers to craft valid notifications, allowing them to erroneously mark any WooCommerce...

The Mintpay for WooCommerce plugin lacks proper authentication checks for payment callbacks, enabling unauthenticated attackers to manipulate order statuses. This vulnerability allows malicious entities to mark orders as paid, cancel orders, and access sensitive customer details, including contac...

The OPay Payment Gateway for WooCommerce plugin version 2.5.5 has a security flaw where it fails to validate the origin of payment notifications accurately. This occurs because the secret key utilized for verifying the notifications is empty by default. As a result, this vulnerability permits una...

The iK Pay Gateway WordPress plugin, prior to version 3.0.4, lacks adequate verification for payment gateway callbacks, which poses a significant security risk. This flaw allows attackers to impersonate legitimate payment notifications, enabling them to incorrectly mark orders as paid without act...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A significant security risk has been identified in Z.ai's Zcode software versions up to 3.14.3 and 3.15.1. This vulnerability lies within the Sed Command Filter component, where inadequate handling may allow malicious actors to execute arbitrary OS commands. Given that the exploit has been public...

A security vulnerability in Cloudflare WARP for Windows enables users with limited privileges to create symbolic links in the C:\ProgramData\Cloudflare\warp-diag-partials directory. When the 'Reset all settings' option is triggered, the WARP service—operating with System privileges—can inadverten...

A vulnerability exists in the Yoosee GM8135S Camera affecting the Secure Boot component. This flaw allows local manipulation that results in improper verification of the cryptographic signature, potentially compromising the device's integrity. Despite early notifications, the vendor has not respo...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

An OS command injection vulnerability exists in Fortinet FortiSandbox versions 4.4.0 through 4.4.8. This flaw arises from improper neutralization of special elements used in operating system commands. An attacker can exploit this vulnerability to execute unauthorized commands, potentially comprom...

A resource exhaustion vulnerability in cowlib allows unauthenticated remote HTTP/2 or HTTP/3 peers to exhaust memory on servers or clients. The flaw lies in the HPACK and QPACK prefixed-integer decoder, which does not impose limits on continuation octets and can lead to severe memory allocation i...

A significant security flaw has emerged in GouGuOA versions up to 6.1.2, specifically within the 'chunkUpload' function located in app/disk/controller/Api.php. This vulnerability arises from inadequate validation of the 'file_extension' parameter, allowing for unrestricted file uploads. Such a we...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A vulnerability has been detected in HashenUdara's edoc-doctor-appointment-system due to an exploitable SQL injection in the admin/add-new.php file. By manipulating the 'spec' argument, an attacker can remotely execute this exploit. The attack method is publicly accessible and poses a risk to use...

A type confusion vulnerability exists in the loadstring function of the Lua Sandbox in 2K Games' Civilization V 1.0.3.144. This flaw allows an attacker to execute a crafted input that can lead to unintended behaviors when handling data types. The issue can be exploited remotely, making it particu...

The vulnerability found in GiantappMan LiveWallPaper 2.6.8.0 for Windows involves inadequate authentication controls within the SignalR Hub component, specifically affecting the file processing of /LiveWallpaper/UploadFile. This flaw allows remote attackers to execute unauthorized actions, leadin...

A security flaw has been identified in Sony Neural Network Libraries, specifically affecting the NNP Converter component. The vulnerability resides in the `func_set_nnabla_version_decorate` function located in the `python/src/nnabla/utils/converter/utils.py` file. By manipulating the `function.ty...