Publicly Disclosed
PoC Exploits

An improper input validation issue exists in the NATS component of Apache Camel, affecting versions 4.0.0 to 4.14.7, 4.15.0 to 4.18.2, and 4.19.0 to 4.20.9. This flaw allows clients capable of publishing to specific NATS subjects to inject arbitrary Camel control headers, which can manipulate the...

The vulnerability allows arbitrary hosts to send ICMP requests that reveal sensitive information, including netmask and timestamp data. This exposure can assist attackers in conducting reconnaissance and facilitate further attacks on the network. Proper configuration and monitoring are essential ...

A significant vulnerability exists in the Tenda BE12 Pro, specifically within the fromVirtualSer function of the /goform/VirtualSer component. This vulnerability allows for manipulation of the input parameters, potentially leading to a stack-based buffer overflow. As a result, attackers can execu...

The Sustainable Irrigation Platform (SIP) versions up to 5.2.16 are vulnerable to command injection through the optional cli_control plugin. This weakness enables unauthenticated attackers to exploit the platform by submitting a malicious payload via the plugin's HTTP endpoint. Once an attack is ...

The Sustainable Irrigation Platform versions up to 5.2.16 expose a Server-Side Request Forgery (SSRF) vulnerability that can be exploited by unauthenticated attackers using a malicious callback URL when the optional Node-RED plugin is enabled. This flaw allows attackers to circumvent destination ...

The Sustainable Irrigation Platform (SIP) version 5.2.16 and earlier is susceptible to a mass assignment vulnerability. This flaw enables unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names within HTTP requests. Vulnerable configurations ...

The Sustainable Irrigation Platform (SIP) through version 5.2.16 is vulnerable to a path traversal issue that can be exploited by attackers who gain access to the restore functionality. By uploading specially crafted JSON backup files that include unvalidated keys, attackers can write files to ar...

A critical flaw in Tenda BE12 Pro routers (version 16.03.66.23) allows for a stack-based buffer overflow through the 'fromDhcpListClient' function in the '/goform/DhcpListClient' file. This vulnerability can be exploited remotely, posing a significant risk to device integrity and security. Attack...

The Sustainable Irrigation Platform (SIP) through version 5.2.16 is susceptible to a cross-site request forgery (CSRF) vulnerability. This flaw allows remote attackers to execute state-changing administrative actions by enticing a logged-in administrator to visit a malicious webpage. The absence ...

The Sustainable Irrigation Platform, up to version 5.2.16, is vulnerable to a stored cross-site scripting (XSS) flaw, enabling unauthorized attackers to inject malicious JavaScript payloads. This vulnerability arises from improper output encoding within program names submitted via HTTP requests, ...

A stack-based buffer overflow vulnerability exists in the Tenda BE12 Pro router due to improper handling in the fromSetIpBind function, specifically in the /goform/SetIpBind file. By manipulating the 'page' argument, an attacker can exploit this weakness to execute arbitrary code remotely. The ex...

Metabase, both the open-source and enterprise versions prior to specified updates, contains a vulnerability that allows malicious actors to execute arbitrary commands at the server's privilege level without requiring authentication. This weakness can lead to significant security breaches, includi...

This vulnerability in Active Directory Domain Services allows attackers to gain elevated privileges within the system, potentially leading to unauthorized access and control over sensitive resources. By exploiting this flaw, an attacker could perform actions that exceed their intended access righ...

A critical security vulnerability has been identified in the Tenda BE12 Pro router, specifically in the 'fromSafeMacFilter' function located in the '/goform/SafeMacFilter' file. This vulnerability allows for a stack-based buffer overflow due to improper handling of input arguments, which can be e...

The vulnerability in GNU Bash through version 4.3 allows attackers to exploit malformed function definitions in environment variables. This can lead to unauthorized writing to files or other impacts, particularly through methods that involve privilege boundaries. Notable examples of exploitation ...

A vulnerability has been discovered in the Tenda BE12 Pro router version 16.03.66.23, specifically in the fromSafeUrlFilter function located in the /goform/SafeUrlFilter file. This weakness can be exploited by manipulating the 'page' argument leading to a stack-based buffer overflow. The exploit ...

A security flaw has been identified in the Tenda BE12 Pro router, particularly in the fromSafeClientFilter function located in the /goform/SafeClientFilter file. This vulnerability can be exploited by manipulating the argument page, leading to a stack-based buffer overflow. Given its remote explo...

A vulnerability exists in the open62541 Shared Client Library, specifically within the responseReadNamespacesArray function of the file src/client/ua_client_connect.c. This flaw allows for a null pointer dereference, which can be caused by improper handling of the Server_NamespaceArray argument. ...

A vulnerability has been identified in Apple's iOS, iPadOS, and macOS that could potentially allow an application to lead to unexpected system termination or unauthorized access to kernel memory. This vulnerability results from insufficient input sanitization, which may be exploited by malicious ...

An authenticated arbitrary file upload vulnerability exists in the /admin/tinymce/upload endpoint of Webkul Krayin CRM version 2.2.x. This flaw enables attackers to upload crafted PHP files, which can subsequently lead to the execution of arbitrary code on the server. Such vulnerabilities can be ...

A security flaw has been identified in the Online Job Portal version 1.0 developed by Code-Projects. This vulnerability affects an unspecified function within the /Admin/DetailJob.php file, enabling attackers to perform cross-site scripting (XSS) attacks remotely. The flaw may allow unauthorized ...

A vulnerability in the Online Job Portal 1.0 by Code-Projects allows attackers to manipulate the 'txtFile' argument in the /JobSeekerInsert.php file, leading to unrestricted file uploads. This vulnerability can be exploited remotely, enabling malicious actors to upload arbitrary files to the serv...

A security flaw has been found in the Code-Projects Online Job Portal, specifically in the DeleteUser.php file. This vulnerability allows attackers to execute SQL injection attacks through manipulation of an unspecified function. The exploit can be executed remotely, posing a significant risk to ...

The AI Engine WordPress plugin prior to version 3.5.5 is susceptible to a path traversal vulnerability. This issue allows authenticated users with editor-level permissions to provide malicious filenames, which the plugin fails to properly sanitize. Consequently, this could permit an attacker to w...

The WP 2FA plugin for WordPress, prior to version 3.1.1.2, is vulnerable due to a flaw in the email verification process during two-factor authentication setup. Attackers who have acquired user credentials can manipulate the verification process by providing an email address under their control. ...

The Newsletters plugin for WordPress, prior to version 4.15, is susceptible to a deserialization vulnerability that arises from the handling of untrusted input via public forms. This flaw permits unauthenticated attackers to inject PHP objects, leveraging a property-oriented gadget chain inherent...

The Word Count and Social Shares plugin for WordPress versions up to 1.0 has a serious security issue where it fails to validate user-supplied file paths before performing deletions. This vulnerability allows authenticated users, such as those with Subscriber roles, to delete any file on the serv...

The SureForms plugin for WordPress prior to version 2.11.1 features an improper payment amount validation flaw. This vulnerability allows unauthenticated users to exploit dynamically-sourced payment fields, leading to potential underpayment for products or subscriptions. Forms configured with a f...

The Ultimate Before After Image Slider & Gallery plugin for WordPress versions prior to 4.7.1 is susceptible to a cross-site scripting vulnerability. This issue arises because the plugin fails to properly escape the shortcode field when outputting the value of the BEAF Slider widget. As a result,...

A vulnerability exists within the Online Job Portal 1.0 developed by Code-Projects, where an attacker can exploit the EditUser.php file through manipulation of the UserId argument, leading to SQL injection. This flaw allows unauthorized access to the database and potential exposure of sensitive i...

A vulnerability has been identified within the itsourcecode Electronic Judging System, specifically affecting the /intrams/admin/add_judges.php file. The manipulation of the 'fname' argument can lead to SQL injection, enabling an attacker to execute arbitrary SQL commands. This exploitation can o...

A significant vulnerability has been identified in the louisho5 Picobot up to version 0.2.0, specifically affecting the ExecTool.Execute function within the exec.go file. This flaw allows for os command injection due to improper input validation, posing a risk for local exploitation. Although the...

An improper input validation vulnerability in the Apache Camel AWS2-SQS Component allows unauthorized manipulation of Camel control headers through unfiltered inbound message attributes. This flaw may permit an attacker to influence the behavior of downstream routes by injecting arbitrary headers...

A vulnerability exists in the louisho5 picobot web Tool which could allow an attacker to exploit the WebTool.Execute function within the internal/agent/tools/web.go file. By manipulating the URL argument, a remote attacker may execute server-side request forgery (SSRF) attacks. This vulnerability...

A weakness has been discovered in the louisho5 picobot's Workspace Handler, specifically in the CreateSkill/GetSkill functions found in the filesystem.go file. This vulnerability enables an attacker to manipulate link following behavior, potentially allowing unauthorized access and exploitation. ...

A security issue has been found in zhayujie ChatGPT-on-WeChat CowAgent that allows for server-side request forgery (SSRF). This vulnerability affects the Vision Tool component, specifically the Vision._download_to_data_url function within the vision.py file. By manipulating the 'image' argument, ...

A vulnerability in the GoClaw tool from nextlevelbuilder may allow for information disclosure due to improper handling of navigation parameters within the handleNavigate function. Specifically, manipulation of the args.targetUrl argument can facilitate unauthorized remote access to sensitive info...

A path traversal vulnerability was identified in nextlevelbuilder GoClaw version 3.13.3-beta.3. This issue arises in the 'writeFile' function within the file internal/providers/acp/tool_bridge.go of the ACP ToolBridge Workspace Handler. An attacker can exploit this vulnerability remotely, allowin...

A vulnerability exists in the ExecApprovalManager.CheckCommand function within the GoClaw product. This flaw is characterized by an incomplete blacklist, which could allow an attacker to execute arbitrary commands remotely. The issue has been publicly disclosed, highlighting the importance of pro...

The PyYAML library, specifically in versions preceding 5.4, has a vulnerability allowing arbitrary code execution when handling untrusted YAML input via the full_load method or FullLoader. This weakness can be exploited by an attacker to execute malicious code on the affected system, taking advan...

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization...

The ejs (Embedded JavaScript templates) package version 3.1.6 for Node.js is susceptible to server-side template injection. This occurs when the 'settings[view options][outputFunctionName]' is manipulated, allowing an attacker to replace the outputFunctionName option with a malicious OS command. ...

A security flaw has been discovered in Nextlevelbuilder's GoClaw version 3.13.3-beta.3, specifically within the bytePlusDownloadVideo function found in the internal/tools/create_video_byteplus.go file. This vulnerability allows attackers to manipulate the output.video_url argument, leading to pot...

A vulnerability exists in the Poco AI Poco-Claw Workspace API that allows an unauthorized user to bypass intended access controls. The issue lies within the function get_workspace_file located in executor_manager/app/api/v1/workspace.py. This flaw arises when the user_id argument is manipulated, ...

A vulnerability exists in the Poco AI Poco-Claw Workspace API that allows an unauthorized user to bypass intended access controls. The issue lies within the function get_workspace_file located in executor_manager/app/api/v1/workspace.py. This flaw arises when the user_id argument is manipulated, ...

A vulnerability exists in the Poco AI Poco-Claw Workspace API that allows an unauthorized user to bypass intended access controls. The issue lies within the function get_workspace_file located in executor_manager/app/api/v1/workspace.py. This flaw arises when the user_id argument is manipulated, ...

A vulnerability exists in the Poco AI Poco-Claw Workspace API that allows an unauthorized user to bypass intended access controls. The issue lies within the function get_workspace_file located in executor_manager/app/api/v1/workspace.py. This flaw arises when the user_id argument is manipulated, ...

ThinkPHP versions prior to 5.1.23 are susceptible to SQL injection attacks through the 'public/index/index/test/index' query string. This vulnerability allows malicious actors to execute arbitrary SQL queries on the underlying database, potentially leading to unauthorized access or manipulation o...

A security vulnerability has been found in mosaxiv Clawlet versions up to 0.2.10, specifically within the tools.webFetch function located in the tools/tool_web_fetch.go file. This flaw allows attackers to execute server-side request forgery (SSRF) attacks, which can be initiated remotely. The exp...

The Balbooa Forms extension for Joomla contains a vulnerability that allows unauthenticated users to upload arbitrary files, including executable files. This flaw can be exploited to achieve remote code execution (RCE), posing a significant security threat to sites leveraging this extension. It i...