Publicly Disclosed
PoC Exploits

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

The PayHere Payment Gateway plugin for WordPress, versions 2.4.0 to 2.4.5, has a security flaw that allows attackers to forge payment notifications. This happens when the merchant secret is not set, which is the default configuration. As a result, unauthorized individuals can mark any order as pa...

An OS command injection vulnerability exists in the VPN module of specified TP-Link Archer router models. This flaw allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a maliciously crafted VPN client configuration file. The vulnerability arises fro...

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log messag...

A security flaw exists in the Mobile Site Directory of dayrui's XunRuiCMS versions up to 4.7.4. This vulnerability is exploited through the function str_replace found in the index.php file. By manipulating the argument dirname, an attacker can execute arbitrary code remotely. Publicly available e...

An improper certificate validation vulnerability exists in the HTTPS listener of Canonical LXD versions 4.0.14, 5.0.10, 5.21.8, and 6.9 prior to the recommended updates. This flaw enables unauthenticated attackers to forge a certificate chain, allowing them to masquerade as a legitimate trusted c...

A code injection vulnerability exists in the Email Template Rendering component of dayrui XunRuiCMS up to version 4.7.4. The issue arises from the function _get_tpl_content located in the Notice.php file, allowing attackers to manipulate template content remotely. The public availability of the e...

A security flaw exists in the Dayrui XunRuiCMS up to version 4.7.4 located in the Member Module's View function. By manipulating the 'catid' argument, a remote attacker can execute SQL injection attacks, exposing sensitive data or compromising the database's integrity. This vulnerability has been...

A vulnerability has been identified in WAVLINK's WN551X3-A, affecting its DNS Resolution Handler component. This security flaw allows remote attackers to inject arbitrary OS commands by manipulating argument data in the function sub_41a430 located in the /bin/ioos file. The issue has been made pu...

A vulnerability affecting the WAVLINK WN551X3-A router has been identified where improper handling of the 'group_name' argument in the WireGuard CLI Group Handler can lead to OS command injection. This vulnerability allows remote attackers to execute arbitrary commands on the device by sending sp...

A vulnerability in the Linux kernel's TCP socket management has been identified, allowing for a use-after-free scenario that can impact network security. Specifically, the issue arises when ownership of certain socket options is transferred between parent and child sockets without proper manageme...

A cross-site scripting flaw has been identified in the CloudClassroom-PHP-Project, specifically within the manageassessment2.php file. The vulnerability arises from improperly handled input in the ExamName parameter, allowing attackers to manipulate the argument and execute arbitrary JavaScript i...

A vulnerability has been identified in mathurvishal CloudClassroom-PHP-Project, specifically related to the viewquery.php file. The issue stems from an unknown function that improperly handles the 'eid' argument, leading to potential SQL injection attacks. This flaw allows remote attackers to exe...

A vulnerability exists in the VStarcam O-KAM SuperIPCam 1.3.3.32, specifically in the function FUN_005a2d44 of the SuperIPCam.exe file related to P2P Session Teardown. This flaw allows for a use-after-free scenario, which can be exploited remotely. The issue was publicly disclosed, and despite at...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A stack-based buffer overflow vulnerability exists in the VStarcam O-KAM Client version 1.3.3.32, specifically in the function FUN_10003EA0 within the DevDll_925.dll library. This flaw enables an attacker to execute arbitrary code remotely, posing significant security risks to affected systems. D...

A path traversal vulnerability exists in the deepset-ai FARM product, specifically in the WordEmbedding_LM.load function located in the language_model.py file. This weakness arises from inadequate validation of the 'embeddings_filename' argument, allowing attackers to potentially access restricte...

A flaw in deepset-ai Farm, affecting versions up to 0.8.0, allows an attacker to exploit the `EmbeddingTokenizer.from_pretrained` method in the Tokenizer Loader component. By manipulating the `vocab_filename` argument, an attacker can execute a path traversal attack, which could lead to unauthori...

A significant security vulnerability exists in the Webpro-nl Knip product versions up to 6.44.0, specifically within the function writeFile located in the Workspace Handler component. This vulnerability arises due to improper handling of arguments in the function which allows attackers to execute...

A weakness has been identified in Aklivity Zilla versions up to 1.3.4, 2.4.7, and 2.5.0-rc2, specifically within the Path.resolve function of the FileSystemServerFactory component. This vulnerability allows manipulation of argument parameters, leading to potential path traversal attacks. Remote e...

A use-after-free vulnerability was identified in Apple’s Safari browser and iOS platforms, which could allow attackers to craft malicious web content that may result in memory corruption. This vulnerability has been addressed with enhanced memory management protocols in versions 26.5.2 of Safari,...

A vulnerability exists in Termix-SSH (versions up to 2.9.2) affecting the processing of the path argument within the file transfer functionality. Specifically, the parameter 'destPath' is susceptible to manipulation, allowing remote attackers to exploit the system via path traversal techniques. T...

A deserialization vulnerability exists in the Workflow Fork Endpoint of jxxghp MoviePilot versions up to 3.1.2, located in the WorkflowExecutor.restore_context function within the app/chain/workflow.py file. This issue allows an attacker to execute malicious code remotely, leading to potential da...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability in the Flask framework allows for session data to be improperly cached by proxies, potentially exposing sensitive session cookies to unintended clients. This occurs when certain conditions are met: the application must be behind a caching proxy that fails to strip cookies, use per...

A significant OS command injection vulnerability exists in the WAVLINK WN536AX6-A device due to improper handling of the 'mac' argument in the /protocol.csp file function host_black. This flaw could allow attackers to execute arbitrary commands remotely, leading to unauthorized access and potenti...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A security weakness has been identified in the WAVLINK WN536AX6-A router affecting the OpenVPN Handler within the file /protocol.csp. Due to improper handling of the 'openvpn_ip' argument in the strcpy function, a stack-based buffer overflow can occur, leading to potential exploitation by remote ...

A vulnerability in the WAVLINK WN536AX6-A router exposes the VPN Client List Handler due to an argument manipulation issue within the function located in the /bin/ioos file. This results in missing authentication checks, allowing an attacker to execute remote exploits. The vulnerability is public...

A security vulnerability has been identified in the WAVLINK WN536AX6-A router, specifically in the WireGuard CLI Group Handler. An attacker can exploit this vulnerability via remote manipulation of the 'group_name' argument in the function 'sub_41a1d8' located in the '/bin/ioos' file, leading to ...

A vulnerability has been discovered in the WAVLINK WN536AX6-A router that affects its web management interface. This flaw resides in the function sub_416760 of the /bin/ioos component and allows for argument manipulation through the group_name parameter, leading to os command injection. Potential...

A vulnerability in the Linux kernel's TCP socket management has been identified, allowing for a use-after-free scenario that can impact network security. Specifically, the issue arises when ownership of certain socket options is transferred between parent and child sockets without proper manageme...

A security vulnerability has been identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP, and RG-ES210GS-P devices, specifically within the Cloud Management component. The flaw arises due to improper handling of the 'url' argument in the file set_cloud_serverUrl.cgi. This vulner...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A vulnerability has been detected in specific models of Ruijie RG-ES series switches, notably affecting the Local Firmware Upgrade Interface via the httpupg.cgi file. This issue can lead to a buffer overflow, allowing attackers to execute remote exploits. The vulnerability is already publicly kno...

A vulnerability in the Linux kernel's TCP socket management has been identified, allowing for a use-after-free scenario that can impact network security. Specifically, the issue arises when ownership of certain socket options is transferred between parent and child sockets without proper manageme...

A significant vulnerability has been identified in WAVLINK WN553X1-B routers, specifically in the WireGuard CLI Group Handler component. This issue arises from improper handling of user input in the function sub_41A748 found in the /bin/ioos file. By manipulating either the group_id or group_name...

A memory overflow vulnerability exists in the NetScaler ADC and Gateway products by Citrix, specifically when configured as a SAML Service Provider (SP) or Identity Provider (IdP). This flaw allows an attacker to potentially execute arbitrary code remotely or cause a denial of service, impacting ...

A security flaw in the WAVLINK WN553X1-B router's firmware version V260403_2.0.0 allows remote attackers to execute arbitrary commands via manipulated arguments in the WireGuard CLI Handler. Specifically, the defect resides in the sub_419DA8 function of the /bin/ioos file, facilitating OS command...

A remote exploitation vulnerability has been identified in the WAVLINK WN553X1-B router, specifically affecting version 260403_2.0.0. This security flaw exists within the 'ovpn_file' handler, particularly in the 'sub_4162A8' function, where improper handling of the 'file_id' argument allows for O...

A vulnerability exists in the ag-ui-protocol affecting versions up to 0.0.58, specifically in the Interrupt expiry component's function isInterruptExpired. This flaw allows for potential remote exploitation that may lead to excessive resource consumption, creating significant performance issues. ...

A vulnerability has been identified in the ag-ui-protocol's ag-ui up to version 0.0.58, specifically within the Transport Decoder Handler component. This issue arises from improper input validation mechanisms, which could be exploited remotely by attackers. Public knowledge of the exploit allows ...

A vulnerability has been identified in the ag-ui-protocol ag-ui product, specifically within the SSE Parser component’s parseSSEStream function in the sse.ts file. This vulnerability allows for remote manipulation resulting in excessive resource consumption. Attackers could exploit this issue fro...

A weakness has been identified in the ag-ui-protocol's HTTP Transport component, specifically impacting the 'e.text' function. This vulnerability allows attackers to execute remote manipulations, leading to significant resource consumption on affected systems. The exploit is currently publicly av...

A security vulnerability exists in the ag-ui-protocol ag-ui product that affects versions up to 0.0.58. This vulnerability resides in an unknown function of the HttpAgent component, specifically within the file sdks/typescript/packages/client/src/agent/http.ts. When exploited, it can lead to unau...

A vulnerability has been detected in Horizon DataSys Reboot Restore Standard versions up to 13.2, specifically within the function sub_23908 of the kernel driver shield.sys. This flaw leads to memory corruption, which can be exploited locally by an attacker. Publicly available exploit techniques ...

A serious vulnerability exists in BuddyPress that allows for Blind SQL Injection due to improper neutralization of special elements used in SQL commands. This flaw can lead to unauthorized access to sensitive information stored in the database, exposing users to potential data breaches. The issue...

A command injection vulnerability exists in the OpenVPN CLI Handler of WAVLINK's WN553X1-B device. The flaw, located in the function sub_416568 of the '/bin/ioos' file, arises from improper handling of the argument 'file_id'. This vulnerability can be exploited remotely, allowing attackers to exe...

An OS command injection vulnerability exists in the WAVLINK WN701AE's ioos Web Backend component, specifically within the del_vlan_group function. By manipulating the vlan_name argument, an attacker can execute arbitrary commands on the operating system. This flaw enables remote exploitation, pos...

A vulnerability exists in the WAVLINK WN553X1-B router, specifically affecting version 260403_2.0.0. An issue related to the 'sub_416B50' function in the '/bin/ioos' file allows an attacker to manipulate the 'file_id' argument, leading to operating system command injection. This vulnerability can...