Publicly Disclosed
PoC Exploits

A vulnerability in TrueConf Server allows remote unauthorized attackers with access to port 4307/TCP to exploit the server versions 5.3.X up to 5.3.9, 5.4.X up to 5.4.9, and 5.5.X up to 5.5.5. By using a crafted script, the attacker can break out of the isolated execution environment and execute ...

The RegistrationMagic plugin for WordPress, prior to version 6.0.9.4, is susceptible to SQL injection due to improper sanitization and escaping of input parameters in SQL statements. This vulnerability enables users with high privileges, such as administrators, to execute malicious SQL queries, p...

The Stripe Payment Forms by WP Full Pay plugin for WordPress prior to version 8.5.1 contains a vulnerability where it fails to accurately verify the completion of a customer portal session. This oversight allows unauthenticated users to access sensitive information, such as subscription and billi...

The Simple Newsletter Plugin for WordPress, prior to version 4.3.3, has a security flaw that allows unauthenticated users to access and disclose personal data of subscribers. This occurs due to the plugin's failure to validate that a requester is indeed the authorized subscriber before presenting...

The Stripe Payment Forms plugin by WP Full Pay for WordPress prior to version 8.5.1 contains an authorization flaw that allows a user with a valid session to manipulate subscriptions that do not belong to them. Specifically, this vulnerability permits unauthorized actions such as canceling, react...

The Return Refund and Exchange For WooCommerce plugin for WordPress prior to version 4.6.4 contains a vulnerability that fails to properly verify guest order ownership during certain AJAX operations. This oversight permits unauthenticated users to gain access to private order communications, enab...

The Directorist plugin for WordPress, designed for business directory listings, can be exploited due to insufficient sanitization of user-supplied image references. This flaw permits users with subscriber-level accounts to manipulate server-readable image files, allowing them to move these files ...

The Order Tip for WooCommerce plugin prior to version 1.6.0 lacks proper user capability checks for file deletion requests and does not restrict deletion paths. This oversight permits users with the Shop Manager role and above to delete arbitrary files from the server, potentially compromising th...

The Eventin WordPress plugin prior to version 4.1.19 contains a security flaw that permits unauthorized users to exploit the guest checkout token mechanism. This vulnerability enables unauthenticated individuals to manipulate their own unpaid orders, marking them as completed and receiving valid ...

The AI Engine plugin for WordPress prior to version 3.7.2 lacks essential authorization checks on specific administrative features. Instead of validating permissions, it issues a token to anonymous users. This design flaw permits unauthenticated attackers to execute AI queries on behalf of the si...

The Kirki WordPress plugin prior to version 6.0.14 contains a serious vulnerability that lacks proper capability checks on certain public AJAX actions. This oversight allows attackers to exploit these endpoints, enabling them to access sensitive information including email addresses of registered...

The Project Manager WordPress plugin prior to version 4.0.7 contains a security flaw in its REST API routes. This vulnerability enables any authenticated user, including those with minimal access rights like subscribers, to maliciously access activity records of other users. Consequently, sensiti...

The Project Manager plugin for WordPress, prior to version 4.0.7, features a significant vulnerability that fails to enforce proper access controls on multiple REST API routes. This oversight allows authenticated users, including those with limited permissions, to gain unauthorized access to sens...

The AI Engine plugin for WordPress, prior to version 3.7.2, has a vulnerability that allows users with subscriber-level accounts to access arbitrary files on the server. This occurs when a caller-supplied URL is improperly handled and mapped to a local filesystem path. If a public API feature is ...

The Project Manager plugin for WordPress, prior to version 4.0.7, lacks essential authorization checks on its import routes. This flaw enables unauthenticated users to create new WordPress accounts with predetermined passwords, effectively bypassing the site's standard registration settings and p...

The Pods WordPress plugin prior to version 3.3.9.1 contains a security flaw that fails to appropriately verify a display callback against its list of restricted functions. This oversight permits users with the author role or higher to execute arbitrary code on the server. Notably, this vulnerabil...

Multiple WordPress plugins, specifically the BlogVault Backup & Staging Plugin, MalCare WordPress Security Plugin, and WP Remote Plugin, prior to version 6.65, are susceptible to a serious data exposure vulnerability. This arises from their failure to sufficiently restrict unauthenticated users f...

The Booking Package plugin for WordPress prior to version 1.7.25 is vulnerable due to inadequate server-side validation of payment amounts. This flaw allows an unauthenticated attacker to manipulate the payment process, potentially paying significantly less than the actual service price. The atta...

The Royal Addons for Elementor WordPress plugin, prior to version 1.7.1066, fails to properly validate certain widget settings before rendering them as HTML attributes. This oversight permits users with Contributor roles and higher to exploit the plugin, potentially leading to Stored Cross-Site S...

The Forminator Forms plugin for WordPress, prior to version 1.57.1, lacks the necessary verification to ensure that site registration is enabled on the network. This oversight allows unauthenticated users to create new sites on a WordPress multisite network, potentially granting them administrato...

The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates plugin for WordPress prior to version 3.7.1 lacks crucial authorization checks on a critical REST route. This oversight allows unauthenticated users to access sensitive account information, includin...

The Tutor LMS plugin for WordPress prior to version 4.0.6 is susceptible to an SQL injection vulnerability. This issue arises due to inadequate validation of values used in constructing database queries. It allows unauthenticated users to manipulate queries to extract sensitive information, speci...

The WPCafe WordPress plugin prior to version 3.0.18 exhibits a significant vulnerability where it fails to implement essential authorization checks during the reservation process via its REST API. This oversight allows unauthenticated users to create reservations without proper validation, using ...

The Royal Addons for Elementor plugin prior to version 1.7.1066 is vulnerable to an arbitrary data exposure flaw, where it fails to implement necessary capability or nonce checks. This oversight allows unauthenticated users to gain access to sensitive taxonomy term data, including names and IDs, ...

The Booking for Appointments and Events Calendar plugin for WordPress prior to version 2.4.7 is susceptible to an unauthenticated access vulnerability. This flaw permits an unauthorized user to manipulate the pending notification queue without requiring authentication. As a result, such users can...

A security flaw in the Booking for Appointments and Events Calendar plugin allows authenticated employees to update the account details of other employees without verifying ownership. This means that any employee with valid access can unjustly change another employee's cabinet password, potential...

The Royal Addons for Elementor WordPress plugin prior to version 1.7.1066 lacks proper capability and ownership checks, relying solely on a publicly accessible nonce. This oversight permits unauthorized users to alter like-counts and visitor-tracking metadata for arbitrary posts, which includes p...

The Eventin WordPress plugin prior to version 4.1.22 is susceptible to an access control vulnerability that permits unauthenticated users to access non-published content. This flaw arises from inadequate restrictions applied to a specific REST API namespace, enabling unauthorized retrieval of dra...

The Virtualization Discovery module of LibreNMS is susceptible to a command line injection vulnerability that allows an authenticated admin user to execute arbitrary commands on the host server. This substantial flaw poses a risk to system integrity and confidentiality, enabling potential attacke...

A security flaw exists in the Keycloak Services component of Red Hat, specifically within the reset-credentials workflow. This vulnerability permits an attacker to initiate a password reset for any user without the need for email verification. As a consequence, it enables unauthorized users to as...

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a...

A Cross-Site Scripting (XSS) vulnerability exists in the Angular runtime and compiler, allowing attackers to inject malicious scripts via security-sensitive attributes. This issue arises when internationalization is enabled on attributes like 'href' while binding to untrusted user data, circumven...

FUEL CMS version 1.4.1 is susceptible to a significant vulnerability that allows for PHP code execution. By manipulating the 'pages/select/' filter parameter or the 'preview/' data parameter, an attacker can execute arbitrary PHP code remotely without authentication. This flaw poses a severe risk...

The Ekushey Project Manager CRM contains a vulnerability that allows stored Cross-Site Scripting (XSS) attacks through improper output encoding of the administrator-configured system name. When this name is displayed on the login page, it is rendered without adequate encoding, permitting any HTML...

A security flaw exists in the Keycloak Services component of Red Hat, specifically within the reset-credentials workflow. This vulnerability permits an attacker to initiate a password reset for any user without the need for email verification. As a consequence, it enables unauthorized users to as...

The Seraphinite Accelerator plugin for WordPress is susceptible to a reflected cross-site scripting (XSS) vulnerability. This issue arises through improper validation of the 'seraph_accel_prep' parameter in versions 2.29.15 and earlier. Specifically, the CacheExtractPreparePageParams() function f...

A security flaw has been discovered in the TOTOLINK N600R router that allows for a command injection via the ntp_server argument in the getCurrentTime function located in the /cgi-bin/cstecgi.cgi file. This vulnerability enables an attacker to send specially crafted commands remotely, potentially...

A security vulnerability exists in the TOTOLINK N600R router, specifically in the setSystemConfig function within the CGI Handler component. The flaw arises due to inadequate handling of the Hostname argument, which can lead to a stack-based buffer overflow. This vulnerability allows attackers to...

A vulnerability exists in the Simple Inventory System version 1.0, specifically within the edit.php file. By manipulating the ID argument, an attacker can execute SQL injection attacks, allowing unauthorized access and manipulation of the database. This vulnerability can be exploited remotely and...

An issue has been identified in the Responsive Design Mode component of Mozilla Firefox that allows for a sandbox escape. This vulnerability impacts users running versions prior to Firefox 149, as well as Firefox ESR versions below 115.34 and 140.9. The flaw could potentially enable an attacker t...

A vulnerability exists within the SililaWijesinghe Food Ordering System relating to improper handling of user input in the /search.php file. An attacker can exploit this flaw by manipulating the search_box parameter, leading to potential SQL injection attacks. Such exploitation can allow unauthor...

A cross site scripting vulnerability exists in the Online Shopping System 1.0, specifically in the /admin/sumit_form.php file. This vulnerability allows attackers to manipulate the 'Success' argument, which can lead to the execution of malicious scripts in the context of the user's session. The e...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A security flaw has been identified in Zackees Transcribe-Anything up to version 4.1.0, specifically within the function ytdlp_download located in the ytldp_download.py file. This vulnerability allows attackers to manipulate the input URL, potentially leading to OS command injection. The attack c...

The WP Fastest Cache plugin for WordPress, prior to version 1.5.1, is susceptible to a vulnerability stemming from the lack of Host header validation. This deficiency allows unauthenticated attackers to manipulate cached pages by embedding references to a malicious server. Consequently, this can ...

A site isolation vulnerability exists in the Graphics component of Mozilla Firefox, which could allow attackers to execute unauthorized actions across different sites. This issue has been addressed in Firefox version 154 and Firefox Extended Support Release (ESR) version 153.1, enhancing user sec...

A vulnerability within the Graphics: Text component of Firefox allows for unintended information disclosure. This issue could potentially expose sensitive data that should remain protected. Mozilla has addressed this vulnerability in various versions, ensuring enhanced security and privacy for us...

This vulnerability involves an information disclosure flaw in the Form Autofill component of Firefox and Firefox ESR. When exploited, it can reveal sensitive user data. Mozilla has addressed this issue in versions 150 of Firefox and 140.10 of Firefox ESR, emphasizing the importance of updating to...

A use-after-free vulnerability has been discovered in the Graphics: ImageLib component of Firefox. This issue may allow an attacker to cause a crash or potentially execute arbitrary code on the affected system. Mozilla has released updates addressing this vulnerability in Firefox version 154, and...

The Airbyte Platform has a vulnerability that allows an attacker to bypass workspace authorization checks. This issue arises from the platform's dependency on the caller-supplied workspace ID without proper validation against the actual owning workspace. When handling requests, the system extract...