Publicly Disclosed
PoC Exploits

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

An out-of-bounds write vulnerability has been identified in Apple iOS and macOS products, leading to potential memory corruption when processing maliciously crafted PDF files. The issue arises due to insufficient bounds checking, which may allow attackers to exploit the vulnerability and execute ...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

A vulnerability in the Wasmtime WebAssembly runtime allows a user-controlled Wasm module to potentially escape its sandbox. A flaw in the Cranelift compiler backend for aarch64 can cause a 'br_table' instruction to compile incorrectly, leading to improper branch target assignments. This misconfig...

An access control flaw in Microsoft Defender permits an authorized attacker to elevate their privileges within the system. This vulnerability arises due to insufficient granularity in access controls, potentially enabling local exploitation of the affected product capabilities. Organizations need...

A vulnerability in versions of SPIP prior to 4.4.20 allows unauthenticated remote attackers to execute arbitrary code. This flaw arises from improper recognition of PHP blocks, particularly with mismanaged strings that contain characters like '<'. Exploitation of this issue poses a significant ri...

An unauthenticated Remote Code Execution vulnerability affects REDCap, enabling attackers to exploit the survey passthrough routing and Data Import processing. By manipulating HTTP requests, a malicious user can target an unintended controller route from a public survey context and provide a craf...

The Bookly plugin for WordPress is susceptible to an Insecure Direct Object Reference vulnerability affecting versions up to and including 28.2. This flaw arises from the 'bookly_get_form_id' AJAX handler, which improperly processes the 'order_id' supplied by users, allowing an attacker to exploi...

A vulnerability in PHP allows for the possibility of remote code execution due to improper management of global state that can reference freed memory. In certain scenarios, the global state retains stale information from previous requests, potentially enabling an attacker to execute arbitrary cod...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A configuration issue in NGINX Plus and NGINX Open Source can allow a remote unauthenticated attacker to forge client SSL sessions. This occurs when the ssl_session_cache is set up without an ssl_session_ticket_key file directive. As a result, the vulnerability enables the attacker to bypass clie...

A flaw exists in the ngx_http_core_module of NGINX Plus and NGINX Open Source, which can be exploited when asynchronous file I/O (AIO) is activated. In certain configurations, processing Server Side Includes (SSI) pages with 'include virtual' commands may lead to a Use-After-Free condition within...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A remote exploit affecting the Desmond Morris node-tesseract up to version 0.2.7 has been identified, allowing attackers to manipulate function arguments in the Command Builder's lib/tesseract.js file, leading to potential OS command injection vulnerabilities. The issue, disclosed publicly, poses...

A vulnerability in Oracle WebLogic Server within Oracle Fusion Middleware allows unauthenticated attackers with network access via T3 and IIOP protocols to compromise the server. This exposure enables attackers to execute arbitrary code, potentially leading to a complete server takeover. This vul...

A critical security flaw exists in the Dexmal Dexbotic application where the function load_pretrained_gr00t, located in the gr00tsonic Checkpoint Loader component, is vulnerable to path traversal attacks due to improper handling of the weight_map argument. This can potentially allow remote attack...

A path traversal vulnerability exists in the Persistor._decompress function of the Model Persistor within the Rasa_NLU_Chi product. This flaw allows an attacker to manipulate file paths, potentially gaining unauthorized access to the filesystem. Exploitation can be executed remotely, posing signi...

The Google Cloud MCP Toolbox for Databases is susceptible to a path traversal vulnerability combined with missing authorization checks. This flaw enables an unauthenticated remote attacker to exploit crafted tool invocation parameters, potentially leading to unauthorized access to host files. By ...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in Microsoft Windows Active Directory Certificate Services that allows an authorized attacker to gain elevated privileges within a network. This weakness can be exploited, potentially giving malicious actors the ability to perform unauthorized actions and access sensitive i...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

The PayDunya WooCommerce Payment Gateway plugin for WordPress versions up to 1.1.6 has a critical vulnerability that allows attackers to falsify payment notifications. By failing to verify the authenticity of incoming notifications and using a predictable method for authentication based on an emp...

The TiendaCrypto plugin for WooCommerce, up to version 1.2.1, suffers from a significant security flaw where the authenticity of payment webhook requests is not properly validated. This is due to an empty key used for verifying request signatures, rendering the system vulnerable to unauthenticate...

The Payment Integration Wompi plugin for WordPress, prior to version 4.0.1, is susceptible to an authentication bypass vulnerability. The plugin fails to confirm the authenticity of incoming payment notifications due to an unconfigured merchant secret, resulting in an unsecured checksum for callb...

The Payex Payment Gateway for WooCommerce plugin, specifically version 1.2.10, contains a significant vulnerability due to inadequate verification of incoming payment notifications. An empty validation secret by default allows unauthenticated attackers to forge valid payment confirmations. This c...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

A security flaw has been identified within the Saruf-Ratul HR-Payroll-Management-System, specifically in the 'chat.php' file. This vulnerability allows an attacker to execute a cross site scripting (XSS) attack by manipulating the argument ID, which could lead to unauthorized access or data manip...

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

A vulnerability exists in the file chat.php of the MD-MAFUJUL-HASAN Online-Payroll-Management-System, where manipulation of the argument ID can lead to cross site scripting attacks. This flaw allows perpetrators to execute malicious scripts remotely, posing serious security risks for users. Despi...

A security flaw exists in the Next.js framework that allows an attacker to bypass authorization checks if such checks are implemented in middleware. This vulnerability arises in versions prior to 14.2.25 and 15.2.3. To mitigate risk, it is recommended to restrict incoming requests that include th...

A regression vulnerability discovered in OpenSSH's server (sshd) involves a race condition affecting the handling of signals. This vulnerability allows an attacker to exploit the sshd service by failing to authenticate within a specified timeframe. If successfully triggered, this flaw could alter...

A local privilege escalation vulnerability exists within the pkexec utility of polkit, a setuid tool that allows unprivileged users to execute commands as privileged users based on predetermined policies. Due to insufficient handling of the calling parameters, pkexec can misinterpret environment ...

An authorization bypass vulnerability exists in the Code-Projects Simple Content Management System version 1.0, specifically within the administrative interface found in /web/admin/welcome.php. This vulnerability arises when manipulating the 'addnews' argument, leading to unauthorized actions tha...

A vulnerability exists in the Tencent RapidJSON library, specifically within the Regex Parser component, where the GenericStringStream<UTF8<char>>::Take function in include/rapidjson/stream.h is susceptible to out-of-bounds read operations. This flaw can be remotely exploited, posing a significan...

A vulnerability in GitLab's CI/CD configuration could permit an unauthenticated attacker to execute arbitrary code on the server. This exploit arises from insufficient validation of a specially crafted regular expression. Affected versions include GitLab CE/EE 19.2 prior to 19.2.8, 19.3 prior to ...

An Incorrect Permission Assignment vulnerability exists in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved, specifically impacting the PTX Series. This vulnerability permits unauthenticated network-based attackers to execute code with root privileges. The framework, wh...

Palo Alto Networks Checkov is susceptible to a code execution vulnerability that enables an attacker to execute arbitrary code when the tool scans a directory containing a configuration file under their control. This flaw can expose systems to potential threats, making it crucial for users to ass...

A vulnerability exists in the SourceCodester Online Food Ordering System version 1.0, specifically within the admin/delete_admin.php file. This weakness arises from a missing authentication mechanism related to an unknown function, allowing unauthorized access through manipulation of the ID argum...

A vulnerability within the Linux kernel related to POSIX timers cleanup can lead to a use-after-free situation. When a non-leader thread invokes exec(), the thread's PID reference in the timer system becomes invalid due to changes in task ownership. If the task fails subsequently in certain opera...

A security flaw exists in the SourceCodester Online Food Ordering System's admin/add_food.php file, where improper handling of the 'image' argument allows for an unrestricted file upload. This weakness can be exploited remotely, potentially leading to unauthorized file uploads and subsequent remo...

A path traversal vulnerability exists in the SourceCodester Online Food Ordering System version 1.0, specifically within the unlink function found in admin/delete.php. An attacker can exploit this vulnerability by manipulating the image_name argument, potentially leading to unauthorized file dele...

A vulnerability has been detected in Argilla affecting versions up to 2.8.0. This flaw resides within an unspecified function in the TextField.vue file, where improper handling of user input can lead to cross site scripting (XSS). Attackers can manipulate this entry point remotely to inject malic...