Publicly Disclosed
PoC Exploits

The vulnerability in libheif, versions prior to 1.23.2, arises from a failure to properly handle crafted HEIF, HEIC, or AVIF item graphs containing nested iden and auxl references. This flaw allows an attacker to trigger a heap out-of-bounds write by exploiting the improper handling of Alpha plan...

A cross site scripting vulnerability has been identified in the gedelumbung HospitalManagement software, specifically within the Guest Book component. This flaw is associated with the manipulation of the parameters 'nama', 'email', and 'pesan' in the 'kirim' function located in the file applicati...

A vulnerability has been identified in gedelumbung HospitalManagement that allows for improper authorization via the Configuration Handler. The issue lies within the function sistem.php::simpan, where manipulation of the arguments such as tipe, title, and content_setting can allow unauthorized ac...

A security flaw in Owen2345 Camaleon CMS versions up to 2.9.2 has been identified, specifically within the Media Crop Handler component. The issue arises from an improper manipulation of the saved_avatar argument in the crop function located in the media_controller.rb file. This vulnerability may...

An information disclosure vulnerability has been identified in the Gedelumbung HospitalManagement product, specifically affecting the error_reporting function in the index.php file related to HTTP Response management. This flaw potentially allows attackers to gain unauthorized access to sensitive...

A confusion issue in the REST API batch endpoint of WordPress versions 6.9.x prior to 6.9.5 and 7.0.x prior to 7.0.2 could facilitate an exploit. This vulnerability, when combined with an existing SQL Injection flaw in the author__not_in WP_Query feature, can allow attackers to execute unauthoriz...

A vulnerability in the gedelumbung HospitalManagement system's reporting module allows remote attackers to bypass authorization controls by manipulating the 'id_param' argument in the application/modules/admin/controllers/laporan_data_pasien.php file. This flaw can lead to unauthorized data acces...

A vulnerability has been identified in gedelumbung HospitalManagement that allows for path traversal through the manipulation of the argument 'gbr' in the hapus function located in application/modules/admin/controllers/data_galeri.php. This security issue can be exploited remotely, enabling an at...

OpenPrinting's CUPS, an open source printing system for Linux and other Unix-like operating systems, is susceptible to a local privilege escalation vulnerability. An unprivileged user can exploit this flaw to trick the cupsd service into authenticating with an attacker-controlled IPP service on l...

A command injection vulnerability has been identified in the Ziroom ZHOME A0101 product, specifically affecting version 1.0.1.0. The problem lies in the handling of the URL parameter within the file /api/ZRnetwork/ping, allowing an attacker to manipulate this argument. Such manipulation could lea...

The MediaWiki UploadWizard Extension by Wikimedia Foundation is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during webpage generation. This can allow attackers to execute arbitrary scripts in the context of users’ browsers, potentially compromising user data and ...

The Mediawiki - Wikibase Extension has a Cross-Site Scripting (XSS) vulnerability due to improper handling of user input during web page generation. This can allow attackers to inject malicious scripts that may execute in the context of a user's browser, compromising user data. The issue is prese...

A vulnerability within the Mediawiki Cargo extension allows for improper neutralization of input during web page generation, leading to reflected cross-site scripting (XSS). This issue can potentially enable an attacker to execute arbitrary JavaScript code in the context of the affected user's se...

An improper neutralization of input during web page generation in the MediaWiki Cargo extension has been identified, leading to a reflected cross-site scripting (XSS) vulnerability. This flaw could allow attackers to inject malicious scripts into web pages viewed by users, potentially compromisin...

A cross-site scripting vulnerability exists in the Cargo extension for Mediawiki, enabling attackers to inject malicious scripts into webpages. Through an improper handling of input during page generation, this flaw can lead to reflected XSS attacks, posing significant risks to users' data and pr...

A cross-site scripting vulnerability has been identified in the Cargo extension of Mediawiki, allowing for stored XSS attacks. This vulnerability stems from improper handling of user input during the web page generation process, which may permit an attacker to execute arbitrary scripts in the con...

The Cargo extension of Mediawiki is affected by a vulnerability that allows for improper handling of input during web page generation, which may lead to stored cross-site scripting (XSS). This flaw can enable attackers to inject malicious scripts into web pages viewed by other users, potentially ...

An improper input neutralization vulnerability in the Mediawiki - CirrusSearch extension allows attackers to execute arbitrary JavaScript code in a user's browser. This reflected cross-site scripting (XSS) flaw primarily affects versions of CirrusSearch up to 1.46.0, enabling potential exploitati...

An improper handling of insufficient permissions vulnerability in the Mediawiki WikiLambda Extension allows users to access functionalities that are not adequately constrained by Access Control Lists (ACLs). This issue impacts users across various operating systems, including Linux, MacOS, and Wi...

A critical vulnerability in the Ziroom ZHOME A0101, specifically in the set_time_zone function located in /api/ZRFirmware/set_time_zone, enables attackers to execute arbitrary commands through manipulation of the hostname or zonename arguments. This flaw allows for remote exploitation, raising se...

A vulnerability has been identified in the Ziroom ZHOME A0101 version 1.0.1.0, specifically affecting the set_syslog function located in the /api/ZRnetwork/set_syslog endpoint. This vulnerability allows for command injection through improper handling of the conloglevel and log_size parameters. An...

A critical security vulnerability has been identified in the Naichen ThinkCMF version 8.0.7 and earlier. This issue resides in the MailController's templatePut function found in the MailController.php file of the Email Template component. The vulnerability arises from improper handling of special...

The Sudo software, prior to version 1.9.17p1, contains a vulnerability that enables local users to gain root access through improper handling of configuration files. Specifically, when the optional --chroot command is used, the software incorrectly processes the /etc/nsswitch.conf file from a use...

A vulnerability has been discovered in Freedesktop Poppler versions prior to 26.09.0, specifically in the function SplashClip::clipToPath. This issue can be exploited through local environment manipulation, leading to an integer overflow. Publicly available exploits exist, underscoring the need f...

This vulnerability arises from a cryptographic issue in Qualcomm's bootloader, specifically when processing a certain partition. The flaw enables unauthorized users to write access to the system, potentially allowing them to load a customized bootloader. This raises significant security risks as ...

A critical vulnerability has been identified in Freedesktop Poppler versions 26.06.0, 26.07.0, and 26.08.0, stemming from an integer overflow in the FoFiTrueType::cvtSfnts function located in fofi/FoFiTrueType.cc. This flaw enables local attackers to potentially execute malicious code. The vulner...

A memory management vulnerability exists in the Linux kernel that impacts garbage collection related to socket control blocks (SCCs). The issue arises during the handling of SCC entries when two SCCs are simultaneously processed. It can lead to a situation where a new edge is published without qu...

A vulnerability has been identified in the Linux kernel's crypto subsystem, specifically within the algif_aead component. This issue arises from an unnecessary complexity in operating in-place, which has been reverted for improved security and performance. The change eliminates the need for in-pl...

A vulnerability has been identified in the Risesoft Y9 WorkFlow-Engine, specifically in the function getByIdAndYear within the CustomHistoricProcessServiceImpl.java file of the OAuth2 Resource Filter. This flaw allows malicious actors to manipulate the year or processInstanceId arguments, resulti...

The Ultra Addons for Contact Form 7 plugin for WordPress contains a vulnerability that allows unauthorized file uploads due to inadequate validation of file types in the 'uacf7_wpcf7_mail_components' function. This weakness affects all versions up to and including 3.5.50. When exploited, particul...

A security flaw exists in Mahonelau Kykms, specifically within the 'doMultiFieldsOrder' function in the QueryGenerator.java file of the SqlInjectionUtil component. An attacker can exploit this vulnerability by manipulating the 'column' argument, potentially allowing for SQL injection attacks. As ...

Kestra is an open-source orchestration platform that allows users to manage event-driven workflows. An issue exists in its AuthenticationFilter, where the public configuration endpoint is improperly secured by being checked only for suffix matches. This oversight permits remote attackers to gain ...

ClipBucket versions 5 through 5.5.3-#197 are susceptible to a time-based blind SQL injection flaw due to improper handling of the language_id parameter in the language update function. This vulnerability allows an authenticated administrator with basic_settings permission to craft malicious SQL q...

A vulnerability exists in Citrix NetScaler ADC and NetScaler Gateway due to insufficient input validation, particularly when TCP TimeStamp is enabled in the TCP Profile. This flaw can lead to a memory overread condition when associated with certain virtual server types such as Load Balancers (LB)...

The Sliver C2 Framework versions 1.7.7 and earlier contain a vulnerability in the operator gRPC handler that allows an attacker to crash the entire teamserver. By sending malformed or empty Download responses from a compromised implant, attackers can trigger an unhandled panic through the operato...

VMware vCenter features a directory traversal vulnerability in its Syslog server component. This flaw allows attackers with network access to exploit the vulnerability, potentially leading to unauthorized execution of arbitrary code. Proper safeguards and patching are essential to mitigate the ri...

An Authentication Bypass vulnerability exists in EPSON EH-TW5350, enabling remote access that may allow unauthorized users to execute commands or compromise the device. This could lead to a Denial of Service, affecting the functionality of the device when exploited with a specific sequence of HTT...

A vulnerability exists within the Epson iProjection application for the EH-TW5350 projector, allowing unauthorized access through hard-coded authentication credentials. This flaw enables potential malicious users to control the projector remotely without proper authorization, posing a security ri...

A verification bypass vulnerability has been identified in the EPSON EasyMP Network Updater, specifically in the version 1.20 of the product. This issue allows malicious actors to exploit weaknesses in the firmware update mechanism that utilizes encrypted firmware via USB. Attackers could potenti...

SiYuan, a self-hosted personal knowledge management system, has a vulnerability in versions 3.8.0 through 3.8.3 that affects the sensitive-path guard due to an incomplete fix. The MCP file tool allows an authenticated administrator to bypass the protected-workspace-file denylist during recursive ...

The decompress package for Node.js enables extraction of archives but contains a vulnerability in its default decompress(input, output) API. It fails to adequately check for symlink chains, allowing an attacker to craft malicious archives with chained symlink entries. This results in the potentia...

This vulnerability in Drupal Core allows for arbitrary PHP code execution under specific conditions. An attacker may deceive an administrator into visiting a malicious page, resulting in the creation of a specially named directory on the server's filesystem. This directory could potentially be ex...

An unauthenticated attacker can exploit a vulnerability in WordPress that allows `get_page_template()` to inadvertently resolve and include a chosen local `.php` file located outside of the active theme directories. When specific server conditions and configurations of the active theme are met, t...

An authenticated arbitrary file upload vulnerability exists in the /admin/tinymce/upload endpoint of Webkul Krayin CRM version 2.2.x. This flaw enables attackers to upload crafted PHP files, which can subsequently lead to the execution of arbitrary code on the server. Such vulnerabilities can be ...

A vulnerability exists in the realjerrytang tacomall application, specifically within the OrgStaffServiceImpl.add function in ApiMaApplication.java. This flaw stems from inadequate validation of the isAdmin/jobId parameters, allowing attackers to manipulate them and gain unauthorized access. The ...

A vulnerability exists in the coolbeans1212 MateisHomePage-Website that allows for cross-site scripting (XSS) through inadequate handling of input in the users.php file. Malicious actors can exploit this flaw remotely, allowing them to execute arbitrary scripts in the context of a victim's browse...

A cross-site scripting vulnerability has been identified in CodeCanyon's Rocket LMS, specifically affecting the Student Profile Image Upload feature in versions up to 2.2. This flaw allows attackers to execute remote scripts through manipulation of the upload function, potentially compromising us...

The NoMachine software contains a vulnerability that allows local attackers to delete arbitrary files by exploiting improper validation of environment variables. An attacker needs to execute low-privileged code on the target system to exploit this weakness. By supplying a malicious path, the atta...

This vulnerability in NoMachine involves improper validation of user-supplied file paths during command line operations. Local attackers can exploit this flaw by executing low-privileged code, leading to unauthorized privilege escalation and the potential execution of arbitrary code within a root...

A significant security flaw has been identified in the REBUILD application, specifically in the `/commons/file-editor-save` functionality. This vulnerability arises from a missing authorization check in the processing of the `url/fileKey` argument, which may allow an unauthorized user to execute ...