Publicly Disclosed
PoC Exploits

This vulnerability affects Oracle Java SE and GraalVM products, allowing unauthenticated attackers with network access via various protocols to exploit the JSSE component. Successful attacks can lead to unauthorized creation, deletion, and modification of critical data, as well as complete access...

Ghidra before version 12.2 contains an integer truncation vulnerability that arises from storing 64-bit string lengths in 32-bit variables. This imperfection could be exploited by attackers, allowing them to input specially crafted packed streams, such as a malicious .sla file. This might lead to...

The Crow Web Framework, prior to version 1.3.4, is susceptible to an uncontrolled recursion vulnerability within the crow::json::load() function. This flaw enables remote, unauthenticated attackers to send requests containing deeply nested JSON structures. By doing so, attackers can exhaust the w...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A buffer overflow vulnerability exists in the ANGLE component of Google Chrome on Android devices, allowing remote attackers to potentially execute arbitrary code outside of the sandboxed environment through the use of specially crafted HTML pages. This flaw may result in significant security ris...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in pig-mesh Pig software prior to version 4.1.1, affecting the orderItem.getColumn function. By manipulating the argument ascs/descs in the SqlFilterArgumentResolver.java file, attackers can execute SQL injection remotely. The risk of exploit is heightened as demonstrated b...

A vulnerability detected in libexpat prior to version 2.6.3 relates to XML parsing inaccuracies within the xmlparse.c file. The flaw arises because the XML_ParseBuffer function fails to appropriately handle negative lengths, potentially leading to undefined behavior during XML processing. This we...

A cross-site scripting vulnerability has been identified in phpIPAM versions up to 1.8.3, specifically affecting the function 'create_rack_link' within 'app/tools/racks/show-rack-popup.php'. An attacker can manipulate the 'deviceid' argument to execute arbitrary scripts in the context of the user...

A security vulnerability in phpIPAM versions up to 1.8.3 allows for remote exploitation via the file upgrade/index.php. An attacker can manipulate the REQUEST_URI argument, potentially leading to unauthorized script execution in a user's browser. This flaw was publicly disclosed, and its potentia...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

The Laravel web application framework has a vulnerability in the TokenGuard, specifically when configured as a standard token-based API guard. Prior to versions 12.68.0 and 13.29.0, this flaw allows an attacker to bypass authentication by submitting a crafted non-string credential. Under certain ...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A design flaw was discovered in the Buffer.concat function of the webhook preParsing handler in Travisun Opptrix version 0.4.0, allowing attackers to perform remote denial of service attacks. This vulnerability arose primarily during earlier development stages and has been publicly disclosed. The...

A significant code injection vulnerability has been identified in Travisun Opptrix version 0.4.0, specifically affecting the Import Endpoint component located at /api/system-update/import. This vulnerability allows for remote exploitation, enabling malicious actors to manipulate the system. The i...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

An integer overflow vulnerability exists in GitLab CE/EE that may allow an unauthenticated attacker to execute arbitrary code on the GitLab server. This issue affects all versions from 7.0 prior to 18.11.13, 19.0 prior to 19.0.10, and other specified versions up to 19.5.1. The exploitation arises...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A flaw within the Schedule API of Travisun Opptrix version 0.4.0 allows for command injection, enabling remote attackers to manipulate the underlying system's functionality. This issue primarily arose from a design flaw during the early stages of development, particularly affecting local environm...

Marimo, a reactive Python notebook, exhibits a significant security vulnerability prior to version 0.23.0. The terminal WebSocket endpoint (/terminal/ws) allows unauthenticated access, enabling attackers to gain a complete pseudo-terminal shell and execute arbitrary commands on the host system. U...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

NetAlertX, a network and presence scanning solution, has a vulnerability that allows attackers to bypass the authentication mechanism prior to version 25.4.14. This vulnerability permits unauthorized individuals to manipulate settings by sending arbitrary requests to the system, specifically targ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in InternScience's InternAgent version 1.5.0, specifically within the LoRA Loading component of the AutoChem module. The flaw arises from an improper handling of the base_model_name_or_path argument in the train function, which allows for the inclusion of functionality from...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

The WPVR WordPress plugin prior to version 9.0.3 fails to adequately sanitize and escape certain tour hotspot contents before storing and rendering them on the front end. This oversight enables users with the Contributor role and above to execute Stored Cross-Site Scripting (XSS) attacks, potenti...

The GeoDirectory plugin for WordPress prior to version 2.8.194 lacks proper verification checks for ownership of listings submitted by users who are not logged in. This oversight allows unauthenticated attackers to gain the ability to modify, unpublish, attach images to, or reassign ownership of ...

The GeoDirectory plugin for WordPress, prior to version 2.8.194, contains a vulnerability that fails to properly sanitize and escape certain attributes of its map shortcode. This oversight allows users with Contributor privileges and above to conduct Stored Cross-Site Scripting (XSS) attacks. The...

The GeoDirectory WordPress plugin prior to version 2.8.194 contains a security flaw where administrator-defined text isn't properly escaped before being written into a generated PHP file. This misconfiguration allows users with elevated privileges, like subsite administrators in a multisite setup...

The GeoDirectory plugin for WordPress, prior to version 2.8.194, contains an access control vulnerability where unauthenticated users can exploit an AJAX handler to access non-public listings. This flaw permits the disclosure of sensitive content, such as draft, pending, and private listings, sim...

A serious flaw in the GeoDirectory plugin for WordPress allows unauthenticated users to access confidential listing information. Specifically, the plugin fails to verify ownership or status when displaying map popups via its single-item REST routes. This oversight permits unauthorized individuals...

The GeoDirectory WordPress plugin allows users with Subscriber-level access and above to exploit a flaw due to insufficient validation of user-supplied image URLs. This can result in the ability to read files from outside the intended web root and potentially lead to the deletion of files on the ...

A security oversight in the News Kit Addons for Elementor plugin allows authenticated users with at least subscriber-level permissions to exploit an AJAX action. The plugin fails to verify user capabilities effectively, which could lead to unauthorized installation and activation of plugins from ...

The GeoDirectory plugin for WordPress, prior to version 2.8.194, is susceptible to an access control vulnerability. This issue arises because the plugin fails to verify the ownership of attachments associated with listings. As a result, users with Subscriber-level access or higher can alter attri...

The Download Monitor plugin for WordPress, prior to version 5.3.4, is susceptible to a Cross-Site Scripting (XSS) vulnerability. This occurs due to improper validation when a user clicks on a link within the plugin. An unauthenticated attacker can exploit this flaw to inject arbitrary JavaScript ...

The News Kit Addons For Elementor WordPress plugin, up to version 1.4.7, has a serious authorization flaw that fails to perform essential capability and ownership checks during an authenticated AJAX action. This vulnerability enables users with as little as subscriber-level access to modify post ...

The Pixel Tag Manager for WooCommerce WordPress plugin versions prior to 2.2.3 contain a vulnerability that lacks adequate capability checks in one of its AJAX actions. This oversight allows harmful interactions by users with low-level roles, such as Contributors, who can exploit the weakness to ...

The asVereinbase WordPress plugin prior to version 1.1.8 contains a security flaw that allows attackers to bypass user authentication. The plugin allows empty stored values to authenticate, enabling unauthorized access to user accounts, including administrative accounts. This vulnerability highli...

The Advanced Twenty Seventeen WordPress plugin prior to version 1.3.1 lacks proper capability checks or nonce verification when creating and activating its bundled child. This vulnerability enables any authenticated user, including users with minimal privileges like subscribers, to change the sit...

The MAS Videos WordPress plugin prior to version 1.3.4 contains an access control vulnerability that enables any authenticated user, regardless of their role, to delete videos, playlists, and other content that belong to different users. This occurs because the plugin does not implement proper ch...

The Front End Users WordPress plugin, up to version 3.2.35, contains an access control vulnerability that fails to limit the account attributes a visitor can modify during front-end registration. This allows unauthenticated users to assign themselves arbitrary membership levels, circumventing est...