Publicly Disclosed
PoC Exploits

The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its contact-management read AJAX actions, allowing any authenticated user with a role as low as subscriber to read other users' CRM contact and lead records, including their private activ...

The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing unauthenticated users to read details a site has chosen to hide on published listings, such as the asking price, sold price, street address and exact ma...

A vulnerability in the Apache Camel HTTP component arises from the improper handling of case sensitivity in request headers. This issue allows an attacker to bypass suppression mechanisms by altering the case of HTTP header names, leading to potential response-splitting and cache-poisoning attack...

A vulnerability in the Apache Camel HTTP component allows sensitive information to be exposed to unauthorized actors. Because of a flaw in the handling of redirect responses, credentials may be inadvertently sent to a malicious server during HTTP redirects when the `followRedirects` flag is true....

A stack-based buffer overflow vulnerability has been identified in the H3C Magic NX15, specifically within the function sub_416874 located in the /usr/bin/usrlist file. This flaw allows for remote exploitation, potentially enabling unauthorized access or malfeasance. The vulnerability has been pu...

A vulnerability exists in the Apache Camel XPath component due to improper handling of the XML document type InputSource. This flaw allows external entities specified in XML payloads to be processed, potentially granting an attacker access to files on the host or enabling requests to arbitrary ho...

A vulnerability exists in H3C Magic NX15 V100R017 that allows remote attackers to exploit the 'importprofile' function in the /api/upload file. This flaw enables manipulation of the 'fileName' argument, leading to path traversal, which can result in unauthorized access to filesystem data. Publicl...

A vulnerability in Spring Security allows malformed X.509 certificate CN values to be incorrectly processed, potentially leading to unauthorized user impersonation. By exploiting this flaw, an attacker could present a specially crafted certificate that misrepresents another user's identity, posin...

A code injection vulnerability has been identified in the H3C Magic NX15, specifically affecting the write function within the RPC interface at /api/esps. By manipulating the argument path, an attacker can execute arbitrary code remotely. Public disclosure of this exploit has issued a warning for...

A significant security flaw has been identified in H3C Magic NX15, specifically within the function sub_416874 located in the /usr/bin/usrlist file. This vulnerability allows an attacker to manipulate commands, potentially leading to unauthorized execution of arbitrary OS commands. The threat of ...

The vulnerability in Apache Camel’s Tika component arises from improper input validation, allowing attacker-controlled document metadata to be injected as headers into the Exchange. This can lead to a serious breach where the document's metadata influences downstream processing, potentially compr...

A logic vulnerability has been identified in the Transsion mobile application 'Com.Transsion.AppLock', which may allow unauthorized users to bypass the application’s password protection mechanism. This flaw arises from improper handling of input verification, potentially exposing sensitive user d...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

The Laravel web application framework is susceptible to a wildcard validation bypass issue, specifically affecting file and image field validations. When wildcard validation is employed (`files.*`), a crafted user request could circumvent established validation rules, potentially exposing applica...

A race condition exists in the Apache Camel PQC component due to improper synchronization when using a shared java.security.Signature instance for multiple exchanges. This vulnerability can lead to verification processes erroneously returning successful results for incorrect signatures, as the in...

A security vulnerability exists in the Kiwilan PHP-Archive library, specifically within the ArchiveZip::extract function located in src/Readers/ArchiveZip.php. This weakness facilitates a path traversal attack, allowing remote attackers to manipulate file paths and access sensitive files outside ...

A security flaw has been identified in Orbitale's ImageMagick-PHP versions up to 3.3.5. This vulnerability lies within the Command::font function found in src/Command.php, specifically due to improper handling of the fontFile argument. This oversight enables attackers to execute OS command inject...

An improper certificate validation issue exists in the Apache Camel Knative component. When using SSL with an unconfigured truststore, the client defaults to trusting all provided certificates instead of adhering to the JVM's default trust anchors. This situation poses serious security risks, as ...

The Apache Camel Thrift component has a vulnerability where incoming data is unmarshalled into a shared instance of the target type rather than a fresh copy. This leads to the accidental sharing of data between processed messages. Specifically, when one message's state is written to the shared ob...

An integrity check validation issue in Apache Camel's Crypto PGP component allows an attacker to bypass integrity checks for certain encrypted messages. This vulnerability is present in versions prior to 4.18.5 and 4.22.1, where specific messages can evade necessary integrity checks during decryp...

A vulnerability exists in the Wuxi Wubang Security Software’s Five-in-One Safety Production Management Information System, particularly involving the xp_cmdshell function within the /ws.asmx file. This security issue arises from unsanitized input in the SQL argument, enabling attackers to perform...

An improper authentication vulnerability exists in the Apache Camel Shiro component that allows thread reuse to potentially bypass credential verification. When a subject is already bound to a thread and matches the principal of an incoming exchange, the system may inadvertently accept this as va...

A vulnerability exists in antoinersx Clawhost affecting versions up to 0.0.45, specifically within the Reverse Proxy component's handleRequest function. This flaw allows an attacker to manipulate the 'token' argument, leading to an open redirect vulnerability that could be exploited remotely. The...

A vulnerability exists in the Linux kernel that concerns the handling of shared skb fragments during the decryption process in ESP-in-UDP packets. When pages are attached from a pipe directly to an skb using MSG_SPLICE_PAGES, the kernel marked these SKBs with SKBFL_SHARED_FRAG, which plays a cruc...

Cognition, a product by CognicellAI, is affected by a vulnerability that allows unauthenticated remote code execution. This issue is due to the agent sandbox backend defaulting to local execution combined with the absence of authentication on its REST/SSE API. Attackers can exploit this flaw by e...

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default config...

The TickTick Android application version 8.2.2.0 is susceptible to a path traversal vulnerability in its exported ShareReceiveActivity. This flaw allows a malicious local application to craft a content:// URI containing traversal sequences that can manipulate file paths. By sending carefully cons...

The vulnerability within the Apache Camel OAuth component allows attackers to exploit sessions without proper state validation in the authorization code callback. This design flaw can enable an attacker to recycle authorization codes from arbitrary browsers, leading to unauthorized access where t...

A vulnerability exists in the Linux kernel's netfilter module that affects the nft_map_catchall_activate() function. This function encounters an inverted element activity check, leading to a failure in appropriately handling catchall map elements during a failed transaction. The bug arises when t...

A vulnerability exists in the GlobalProtect feature of Palo Alto Networks PAN-OS software, allowing for arbitrary file creation. This issue can be exploited by an unauthenticated attacker to execute code with root privileges on the affected firewall systems. Specific configurations and versions a...

A vulnerability has been discovered in the Wuxi Wubang Security Software Five-in-One Safety Production Management Information System, specifically in the Upload Endpoint. This flaw resides in the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx, where improper handling of the 'NewFi...

A security flaw has been identified in the FusionPBX Dialplan Editor that allows for remote OS command injection due to improper validation in the dialplan.php file. This vulnerability can be exploited by manipulating the affected elements, potentially enabling an attacker to execute arbitrary co...

A vulnerability exists in Apache Camel where improper handling of code generation can lead to code injection and expression language injection. This affects versions of Apache Camel between 4.4.0 and 4.18.5, as well as between 4.19.0 and 4.22.1. The Dynamic Router Control endpoint allows maliciou...

A vulnerability exists in Webkul Aureus ERP affecting versions up to 1.6.0, specifically within the UserForm.php file located in the security plugin. This flaw allows for the manipulation of the Password argument, leading to weak password requirements that could be exploited remotely. Though the ...

A security vulnerability in Webkul Aureus ERP versions up to 1.6.0 allows for remote manipulation of the composer.json file, which may lead to the injection of sensitive information into debugging output. This could create pathways for unauthorized users to access sensitive data, thereby exposing...

A Server-Side Request Forgery (SSRF) vulnerability exists within the Apache Camel AS2 component, allowing an attacker to exploit a misconfiguration in message handling. Specifically, when sending a Message Disposition Notification (MDN), the AS2 component would take the destination address direct...

A vulnerability in JumpServer versions prior to 5.0.0 allows for OS command injection through the Template Rendering component. By manipulating the IP/HOST argument, an attacker can execute remote commands, potentially leading to unauthorized access and system compromise. Users are urged to upgra...

A vulnerability in MemTensor's memmy-agent, specifically within the Memory Service component, allows unauthenticated remote access to the function requireAdminWrite. This weakness can lead to resource consumption, potentially resulting in a denial-of-service condition. Although the endpoint expos...

A vulnerability has been identified in the vraj404 Criminal-Management-System affecting the Officer Registration Form. This vulnerability allows an attacker to exploit the mysqli_error function within the addOfficer.php file. The manipulation of key input arguments such as offName, offID, ID, con...

A security vulnerability has been identified in the vraj404 Criminal-Management-System, specifically in the Search Page component due to improper handling of user input in the mysqli_query function within the Officers/searchOff.php file. This vulnerability allows remote attackers to manipulate th...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

The Cockpit web application in Camunda suffers from an authorization bypass vulnerability, where authenticated attackers can exploit inverted logic in the permission check function. This flaw allows them to gain unauthorized access to sensitive data such as process instances and definitions, as w...

Camunda versions prior to 7.24.14 and 7.23.17 are susceptible to an expression injection vulnerability associated with the AdhocQueryValidator. This weakness allows authenticated users to bypass restrictions set for expressions in adhoc queries by manipulating the orQueries field in TaskQueryDto....

Authored in versions 7.24.0 through 7.24.14 and 7.23.0 through 7.23.17, this vulnerability in Camunda's engine REST API permits authenticated attackers lacking permission grants to access sensitive task comments and attachments. Attackers can exploit specific endpoints like getAttachment, getAtta...

A SQL injection vulnerability has been detected in the vraj404 Criminal Management System, specifically within the 'Submission Form' component of the file home.php. By manipulating input parameters such as id, name, and address, attackers can execute unauthorized SQL commands. This vulnerability ...

A significant security flaw has been identified in the vraj404 Criminal-Management-System, specifically within the 'search.php' file. This vulnerability allows the manipulation of the 'Search' argument, which can lead to SQL injection attacks. The flaw enables remote attackers to execute unauthor...

A security flaw has been found in the vraj404 Criminal Management System, specifically in the 'move_uploaded_file' function located in home.php. This vulnerability enables attackers to manipulate the 'my_img' argument, leading to unrestricted file uploads. Such a weakness allows for potential rem...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

An information disclosure vulnerability has been identified in ai-genius-automations Octoally, specifically within an unknown function located in server/src/index.ts. By manipulating the argument path, an attacker could expose sensitive information, potentially leading to unauthorized access. Thi...

A vulnerability in the Linux kernel's IPv4 stack involves improper validation of checksum metadata, allowing packets with bad checksums to enter the system. This can lead to corruption of the network header through the skb_checksum_help function, potentially resulting in unpredictable behavior an...