Publicly Disclosed
PoC Exploits

The Strong Testimonials plugin for WordPress contains a Cross Site Scripting (XSS) vulnerability that affects versions up to 3.3.11. An attacker could exploit this weakness to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data theft. Websi...

A vulnerability exists within the SourceCodester Simple Company Website 1.0, specifically affecting the processing of the file /admin/services/manage.php. An attacker can exploit this vulnerability through a manipulation of the argument ID, enabling SQL injection attacks. This issue poses a risk ...

This vulnerability allows unauthorized command execution in the GPU micronode, leading to potential memory corruption when a specific sequence of commands is executed. Attackers could exploit this weakness to disrupt system functionality or gain access to sensitive areas of memory, posing risks t...

A vulnerability affecting the SourceCodester Performance Indicator System 1.0 has been identified, which allows for SQL injection through the manipulation of the 'Category' argument in the /opils/admin/view_product.php file. This flaw facilitates remote exploitation, raising significant security ...

A security flaw has been identified in the vLLM product of vllm-project, affecting versions up to 0.31.0. This vulnerability is rooted in the function get_token_bin_counts_and_mask located in the utils.py file of the Penalty Handler component. An attacker could exploit this issue to manipulate th...

A vulnerability exists in the Kusalkasilva Learning-Management-System that allows an attacker to manipulate the argument 'school_year' via the file search_class.php. This SQL injection vulnerability can be exploited remotely, potentially leading to unauthorized access or modification of the syste...

A remote code execution vulnerability found in React Server Components allows attackers to exploit improperly handled payloads. This issue affects versions 19.0.0 through 19.2.0, compromising server function endpoints through unsafe deserialization of HTTP request payloads. As a result, this flaw...

The Kusalkasilva Learning-Management-System is subject to a SQL injection vulnerability in the student_signup.php file within the Student Registration Endpoint component. This vulnerability enables an attacker to execute arbitrary SQL queries, potentially compromising sensitive data. The vulnerab...

A SQL injection vulnerability has been identified in the Kusalkasilva Learning-Management-System, specifically within the Administrator Login Endpoint function mysql_query located in admin/login.php. By manipulating the arguments for the username and password, attackers can exploit this vulnerabi...

A vulnerability exists in the Kusalkasilva Learning-Management-System affecting the login endpoint's mysql_error function in the login.php file. By manipulating the username and password arguments, an attacker can perform SQL injection attacks remotely. Despite early notifications regarding this ...

A weakness in the authorization mechanisms of Microsoft Exchange Server can be exploited by authenticated attackers, allowing them to gain elevated privileges over the network. This vulnerability poses significant risks as it can enable attackers to manipulate sensitive data or compromise additio...

A cross-site scripting vulnerability has been identified in the SourceCodester Simple Student Information System 1.0. This issue specifically affects the processing of user input in the file /register.php, where the arguments 'firstname' and 'lastname' can be manipulated. This allows attackers to...

A vulnerability exists in the SourceCodester Simple Student Information System version 1.0 within the searchresults.php file's clean function. This flaw allows for remote cross site scripting attacks through manipulation of the searchbox argument. Attackers can execute payloads that may compromis...

A vulnerability has been identified in the Tenda AC5 router, specifically within the Wifi Handler component at the /goform/setWifi endpoint. This flaw allows for manipulation of the wifiPwd argument, potentially leading to a stack-based buffer overflow. The exploitation of this vulnerability can ...

The Slider Pro plugin for WordPress, up to version 1.0.0, contains a vulnerability that allows unauthenticated users to exploit an AJAX action without any capability or authorization checks. This could enable these users to access sensitive information such as the titles, excerpts, and permalinks...

The Fast Courier WordPress plugin, up to version 5.2.3, contains a significant security flaw that exposes a REST API endpoint without proper authentication. This vulnerability allows unauthorized attackers to modify order fulfillment data, including the courier status and customer-facing tracking...

The File Media Renamer plugin for WordPress has a flaw that fails to validate user authorization for modifying media attachments. This vulnerability allows any user with file-upload privileges to rename media files belonging to other users, including site administrators. As a result, it can lead ...

The elegro Crypto Payment WordPress plugin prior to version 1.0.1 has a serious security flaw that allows attackers to deceive the payment system. Specifically, it fails to enforce the requirement for a shared secret, enabling unauthorized individuals to send fraudulent payment notifications. As ...

The Deema Payment Gateway for WordPress, up to version 1.1.2, contains a vulnerability that permits unauthenticated users to mark orders as paid without any legitimate payment verification with the payment provider. This occurs due to the plugin's failure to verify the payment status or amount wh...

The Deema Payment Gateway plugin for WordPress, up to version 1.1.2, has a significant security issue due to its failure to verify the authenticity of incoming payment provider notifications. This vulnerability occurs because the verification feature is disabled by default, enabling unauthorized ...

A vulnerability has been identified in the Employee-Movement-Tracking-and-Monitoring-Website developed by bhagya3929, specifically within the /admin_transaction.php file. The vulnerability arises from improper handling of the 'Username' argument, allowing remote attackers to exploit the system th...

A security vulnerability has been identified in the vLLM software developed by vllm-project, specifically within the Completions Request Handler's conv_ssm_forward function. The flaw allows for out-of-bounds reading of memory, posing a significant security risk. This vulnerability can be exploite...

A vulnerability exists in imgproxy versions up to 4.0.17, specifically within the sanitizeElement function of the SVG Handler module located in the file processing/svg/svg.go. This flaw facilitates a cross site scripting (XSS) attack, enabling attackers to execute malicious scripts remotely. The ...

A security vulnerability has been identified in the Uptrace product, specifically in the 'Login' function within the file pkg/org/user_handler.go. This issue allows for information exposure through error messages, potentially enabling remote attackers to gain sensitive information. Despite report...

A vulnerability has been detected in SourceCodester Drug Recommendation System 1.0, which allows for cross-site request forgery (CSRF) attacks. This weakness occurs in an undisclosed function, enabling an attacker to manipulate requests from a remote location. The exploit is publicly available, p...

A security flaw has been identified in the SourceCodester Drug Recommendation System version 1.0, specifically targeting an unknown function within the file Admin/add_drug.php. This vulnerability allows attackers to perform cross site scripting (XSS) attacks, which can be executed remotely. The e...

The SourceCodester Drug Recommendation System 1.0 is vulnerable due to an improper authentication flaw in the Auth Guard component. An attacker can manipulate the user_id argument, allowing for unauthorized access. This vulnerability can be exploited remotely, with existing public exploits making...

A vulnerability was identified in the PHPGurukul User Registration & Login and User Management System version 3.3, specifically within the Change Password Handler located in loginsystem/admin/change-password.php. The flaw arises from the improper handling of the currentpassword argument, leading ...

A security flaw has been identified in the jishenghua jshERP software, specifically within the Financial Receipt Update Handler. The vulnerability resides in the updateAccountHeadAndDetail function of the AccountHeadService.java class. It allows an attacker to perform unauthorized actions remotel...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A vulnerability has been identified in Chillzhuang's SpringBlade framework that affects the User Detail Endpoint within the RoleController.java file. This vulnerability arises from improper handling of argument ID manipulation, allowing remote attackers to gain unauthorized access to user details...

A security vulnerability has been identified in the Chillzhuang SpringBlade framework, specifically within the Parameter Submit Management component. An improper authorization issue arises from the manipulation of the 'initPassword' argument in the ParamController.java file. This flaw allows for ...

A vulnerability exists in the Newbee-Mall's Shopping Cart Quantity Handler, affecting versions up to 2.7.5. This flaw lies within the updateAccountHeadAndDetail function, where improper handling of the 'goodsCount' argument can lead to unintended business logic errors. It poses a security risk as...

The Micromatch braces library up to version 3.0.3 is susceptible to a stack overflow due to insufficient depth guarding in its recursive Abstract Syntax Tree (AST) walkers. Attackers can exploit this vulnerability by providing deeply nested brace patterns within the character limit, which may lea...

A significant vulnerability in PickMall's Lilishop, specifically in the Buyer Invoice List component, allows for an authorization bypass via manipulation of the 'memberId' parameter. This weakness enables attackers to potentially gain unauthorized access to sensitive functionalities, which can be...

This security vulnerability is caused by improper validation of the buffer length when processing fast boot commands across various Qualcomm Snapdragon products. An attacker could exploit this flaw to execute arbitrary code or cause unintended behavior, potentially compromising the affected devices.

A vulnerability in the PickMall Lilishop application version 4.2.4 and earlier has been identified, affecting the Mobile Binding component. The issue arises from an unspecified function within the '/buyer/passport/member/bindMobile' file, where inappropriate handling of the 'Username' argument ca...

IrfanView 4.54 has a vulnerability that allows attackers to trigger a denial of service or potentially other unspecified effects by using specially crafted XBM files. This issue arises when the application mishandles problematic data during processing, particularly at the point where it reads a m...

A vulnerability exists in the yogeshojha reNgine, particularly within the listTargets Endpoint's subdomain_discovery function in tasks.py. This flaw allows for OS command injection through improper argument handling. Attackers can exploit this vulnerability remotely, leading to potential unauthor...

A vulnerability in OSSRS srs versions up to 7.0-a1 was identified that allows for missing authentication within the System API component, specifically in the function systemAPI.Run located at internal/proxy/api.go. This issue enables unauthorized remote access, which could be exploited by attacke...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A security vulnerability has been identified in the girishsaraf Online-Appointment-Booking-System, particularly affecting the signup.php file within its Registration Handler component. This flaw allows attackers to manipulate the 'fname' parameter, leading to SQL injection vulnerabilities. As a r...

A vulnerability has been discovered in the Online-Appointment-Booking-System created by girishsaraf. This security flaw is present in the Doctor Search Endpoint's locateus.php file, specifically within its mysqli_query function. An attacker can manipulate the 'doctorname' argument, potentially le...

A vulnerability exists in the girishsaraf Online-Appointment-Booking-System that affects the AJAX Endpoint component. The flaw is found in the get_town.php file, where improper handling of parameters like countryid, townid, cid, didval, and cidval can lead to SQL injection attacks. Attackers may ...

A critical vulnerability exists in the girishsaraf Online-Appointment-Booking-System that could allow attackers to execute arbitrary SQL queries via the 'uname' and 'pass' parameters in the Admin/mlogin.php file. This SQL injection vulnerability may be exploited remotely, putting user data at ris...

A vulnerability has been identified in the O2OA General Module, specifically in the action function responsible for uploading Excel files through a URL. This issue revolves around improper validation of the 'fileUrl' parameter, which could be exploited to carry out a server-side request forgery (...

An incorrect authorization flaw in the Camunda Admin web application's first-run setup endpoint allows an unauthenticated remote attacker to exploit the system when the camunda-admin group is empty. The vulnerability arises from the SetupResource's failure to accurately assess setup availability,...

A security flaw exists in the JWT Signing configuration of Lybbn Django-Vue-Lyadmin up to version 3.2.12, where the SECRET_KEY argument is hard-coded within the backend/application/settings.py file. This weakness allows for potential remote exploitation, as the hard-coded key can be manipulated. ...

A security flaw has been identified in the file UploadController.class.php of the UploadTicketFile Endpoint in Feelcrm-os version 1.0.0. This vulnerability enables unauthorized file uploads due to improper handling of the 'cmd' argument. The issue can be exploited remotely, allowing attackers to ...

A vulnerability has been detected in the Feelcrm-os product version 1.0.0, specifically in the index function of MemberController.class.php. This flaw enables attackers to manipulate the 'group_id' argument, resulting in SQL injection attacks that can be executed remotely. The exploit is publicly...