Publicly Disclosed
PoC Exploits

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

The vulnerability in SPIP affects earlier versions than 4.4.18, where an unauthenticated blind SQL injection exists in the public sitemap endpoint. This flaw occurs due to the MySQL escaper, spip_mysql_cite(), returning unescaped values when the target column type is date and the supplied value c...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Traefik, an open-source HTTP reverse proxy and load balancer, is susceptible to a vulnerability that allows for cross-vhost routing bypass and path-scoped authorization bypass. The issue arises because Traefik accepts a rootless HTTP/1 request target stored in URL.Opaque while leaving URL.Path em...

Traefik versions prior to v2.11.55 are susceptible to an authentication bypass vulnerability present in the digestAuth middleware. This flaw allows attackers to exploit a scenario where unknown usernames are given an empty secret, leading to an absence of rejection during authentication attempts....

A vulnerability in n8n, an open-source workflow automation platform, was identified where earlier versions permitted dynamic binding through a sanitizer that failed to reject reserved class member names. Specifically, a class field named '__sanitize' could effectively rebind the sanitizer, allowi...

A vulnerability in the krupalshah Employee Recruitment System affects the Registration component, specifically within the /source/registerform3.php file. The manipulation of the 'pemail' parameter can lead to SQL injection attacks, allowing an attacker to execute arbitrary SQL commands remotely. ...

A vulnerability exists in the krupalshah EmployeeRecruitmentSystem within the Registration Wizard's mysql_query function located in /source/registerform2.php. This flaw allows attackers to manipulate parameters like university, institute, branch, degree, status, CPI, semester, and experience, lea...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A vulnerability in the krupalshah EmployeeRecruitmentSystem allows for SQL injection through manipulated user input fields such as firstname, middlename, lastname, gender, birthdate, state, statespecify, city, and cityspecify in the /source/registerform1.php file. This issue enables attackers to ...

A security flaw has been identified in Privoce's Vocechat (versions up to 0.9.121) related to its Query Parameter Handler. The vulnerability stems from improper handling of the 'welcome' parameter in the 'widget.html' file. This oversight allows attackers to execute malicious scripts in the user'...

A path traversal vulnerability was identified in the 1999AZZAR Designer MCP product, specifically in the 'get_reference' function within the MCP Interface. The flaw allows an attacker to manipulate the input argument 'Name', potentially exploiting the system through remote requests. As the exploi...

The Duplicator plugin for WordPress prior to version 5.0.0 contains a security flaw that permits unauthorized users to execute arbitrary PHP code on a multisite environment. Specifically, the plugin's one-click upgrade feature lacks sufficient access controls and is exposed without authentication...

The Datawiza Proxy Auth Plugin for WordPress is vulnerable due to insufficient validation of user-identity and role HTTP request headers from untrusted sources. This flaw allows attackers to impersonate an authenticated user, potentially gaining administrator access without the necessary credenti...

The WPVR plugin for WordPress prior to version 9.1.3 is susceptible to a user role bypass vulnerability. This flaw occurs during the setup wizard, where insufficient validation of user capabilities allows individuals with Contributor roles and above to create and publish tour content improperly. ...

The WPVR WordPress plugin, prior to version 9.0.3, is susceptible to a security deficiency that fails to adequately enforce object-level ownership checks when users update virtual tours. This allows individuals with contributor privileges or higher to modify, reconfigure, and even publish virtual...

The Qi Addons For Elementor plugin for WordPress prior to version 1.11.2 suffers from a critical input validation issue. This vulnerability allows users with Contributor permissions and higher to inject live HTML forms, including sensitive password fields, into their posts. The plugin fails to pr...

The WPVR WordPress plugin prior to version 9.0.3 contains a flaw that allows users with contributor-level access and above to read and update virtual tours created by other users. This vulnerability results from a lack of proper checks to enforce object-level permissions, enabling unauthorized us...

The InstaWP Connect plugin for WordPress prior to version 0.1.4.2 contains a flaw that allows for insufficient capability checks. An authenticated user, granted access by an administrator, can exploit this vulnerability to overwrite plugin settings. This includes altering permissions that dictate...

The GiveWP WordPress plugin prior to version 4.19.0.1 is susceptible to an improper access control vulnerability. This issue arises because the plugin fails to accurately determine the specific page to which a page-capability request pertains. As a result, users assigned a custom fundraising role...

The GiveWP plugin for WordPress prior to version 4.19.0.1 contains a significant security flaw that permits users with donor-report (view) access, but lacking donor-edit permissions, to manipulate the stored addresses of donors. This vulnerability stems from inadequate capability checks during th...

The GiveWP WordPress plugin, prior to version 4.19.0.1, is susceptible to an improper authorization vulnerability. This flaw allows unauthorized users to access unpublished donation forms—including drafts, pending, private, and scheduled forms—when rendered on public front-end routes. By circumve...

The GiveWP plugin for WordPress prior to version 4.19.0.1 allows for improper sanitization and escaping of donation form template settings. This oversight can be exploited by users with specific roles who can modify form settings, permitting the injection of arbitrary scripts. Consequently, these...

The GiveWP WordPress plugin, prior to version 4.19.0.1, contains a flaw in its filename validation process. This vulnerability allows users with elevated custom roles to exploit the system by performing path traversal attacks. As a consequence, attackers can read sensitive contents from JSON-pars...

The Contact Form by Supsystic WordPress plugin, prior to version 1.8.0, is vulnerable to an arbitrary web script injection. This vulnerability arises due to inadequate sanitization and escaping of form names, which allows users with access to the form editor to inject malicious scripts. These scr...

The WP Stripe Checkout plugin prior to version 1.2.2.62 lacks proper verification of the Stripe webhook signature when no signing secret is configured. This oversight allows unauthorized attackers to send forged payment completion notifications, enabling them to create completed orders without ac...

The Chikkili-Google Pay India for WooCommerce plugin version 1.0.6 suffers from an improper authentication issue. This vulnerability does not adequately verify the origin of payment notifications before marking associated orders as paid. As a result, unauthorized attackers can exploit this flaw t...

A vulnerability exists in prasathmani TinyFileManager versions up to 2.6, specifically affecting the remote URL file upload functionality in tinyfilemanager.php. This security issue allows hackers to upload files without restrictions, potentially leading to unintended consequences, including remo...

This vulnerability affects Oracle Java SE and GraalVM products, allowing unauthenticated attackers with network access via various protocols to exploit the JSSE component. Successful attacks can lead to unauthorized creation, deletion, and modification of critical data, as well as complete access...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Ghidra before version 12.2 contains an integer truncation vulnerability that arises from storing 64-bit string lengths in 32-bit variables. This imperfection could be exploited by attackers, allowing them to input specially crafted packed streams, such as a malicious .sla file. This might lead to...

The Crow Web Framework, prior to version 1.3.4, is susceptible to an uncontrolled recursion vulnerability within the crow::json::load() function. This flaw enables remote, unauthenticated attackers to send requests containing deeply nested JSON structures. By doing so, attackers can exhaust the w...

A vulnerability exists in the YunaiV ruoyi-vue-pro product, specifically within the SMS Code Verification feature. The flaw is located in the validateSmsCode0 function of SmsCodeServiceImpl.java, enabling improper restriction of excessive authentication attempts. This vulnerability can be exploit...

The YunaiV/zhijiantianya ruoyi-vue-pro product is compromised by a vulnerability found in the AuthController.java file, particularly in the SMS Code Verification component. This issue arises from the manipulation of the mobile/code arguments, leading to improper authentication. The vulnerability ...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow vulnerability exists in the ANGLE component of Google Chrome on Android devices, allowing remote attackers to potentially execute arbitrary code outside of the sandboxed environment through the use of specially crafted HTML pages. This flaw may result in significant security ris...

A security flaw has been identified in Zylon PrivateGPT versions 1.0.0 and 1.0.1, specifically within the load_file_from_uri function in the URI Artifact Loader component. Malicious users can exploit this vulnerability to perform server-side request forgery, allowing unauthorized requests to be e...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in pig-mesh Pig software prior to version 4.1.1, affecting the orderItem.getColumn function. By manipulating the argument ascs/descs in the SqlFilterArgumentResolver.java file, attackers can execute SQL injection remotely. The risk of exploit is heightened as demonstrated b...

A vulnerability detected in libexpat prior to version 2.6.3 relates to XML parsing inaccuracies within the xmlparse.c file. The flaw arises because the XML_ParseBuffer function fails to appropriately handle negative lengths, potentially leading to undefined behavior during XML processing. This we...

A cross-site scripting vulnerability has been identified in phpIPAM versions up to 1.8.3, specifically affecting the function 'create_rack_link' within 'app/tools/racks/show-rack-popup.php'. An attacker can manipulate the 'deviceid' argument to execute arbitrary scripts in the context of the user...

A security vulnerability in phpIPAM versions up to 1.8.3 allows for remote exploitation via the file upgrade/index.php. An attacker can manipulate the REQUEST_URI argument, potentially leading to unauthorized script execution in a user's browser. This flaw was publicly disclosed, and its potentia...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...