Publicly Disclosed
PoC Exploits

A vulnerability exists in libsndfile's WAV parsing functionality, specifically within the wavlike_subchunk_parse function in the source file src/wavlike.c. This issue arises from the use of an uninitialized variable, allowing for potential manipulation that may lead to remote code execution. The ...

A vulnerability present in GPAC's AIT Parser allows for remote exploitation through the function gf_m2ts_decode_ait, located in src/media_tools/ait.c. This flaw can result in an out-of-bounds write, potentially leading to unauthorized memory access or application crashes. As the vulnerability has...

An expression language injection vulnerability exists in Apache Struts that enables attackers to craft specific requests to inject OGNL expressions, potentially leading to remote code execution. This primarily affects applications using the legacy RESTful action mapper when the OGNL allowlist is ...

A SQL injection vulnerability exists in the SourceCodester Online Reviewer System version 1.0. This flaw is located in the PDO::prepare method within the login/index.php file. An attacker could exploit this weakness by manipulating the username and password inputs to execute arbitrary SQL code. T...

A significant SQL injection vulnerability has been identified in the SourceCodester Online Exam System version 1.0. The issue resides within the login functionality, specifically inside the adminpanel/admin/query/loginExe.php file. An attacker can manipulate the username and password arguments to...

A vulnerability has been identified in the SourceCodester Art Gallery Management System version 1.0, specifically within the Account Creation component. The flaw is associated with inadequate input validation in the Action::save_user function located in the admin/admin_class.php file. An attacker...

An expression language injection vulnerability exists in Apache Struts that enables attackers to craft specific requests to inject OGNL expressions, potentially leading to remote code execution. This primarily affects applications using the legacy RESTful action mapper when the OGNL allowlist is ...

A security flaw has been identified in the User Management component of the SourceCodester Simple Cafe Billing System version 1.0. Specifically, the Action::save_user function within the admin_class.php file is susceptible to manipulation through the argument 'Type', resulting in improper authori...

A vulnerability exists in HBAI-Ltd's Toonflow-app prior to version 2.0.0, specifically within the exportData Endpoint. This vulnerability can lead to unauthorized information disclosure which requires a local attack vector. The exploit has been made public and can potentially be utilized by malic...

An expression language injection vulnerability exists in Apache Struts that enables attackers to craft specific requests to inject OGNL expressions, potentially leading to remote code execution. This primarily affects applications using the legacy RESTful action mapper when the OGNL allowlist is ...

A vulnerability exists in the girishsaraf Online-Appointment-Booking-System that allows unauthorized manipulation of booking status through the submit2 Handler. The affected file, changebookingstatus.php, fails to adequately restrict access to sensitive operations, enabling remote attackers to ex...

A vulnerability resides in the girishsaraf Online-Appointment-Booking-System, primarily affecting the Admin/showdoctor.php file. This issue arises from inadequate authorization checks, allowing unauthorized access to certain functionalities. The exploit can be executed remotely, posing a signific...

An expression language injection vulnerability exists in Apache Struts that enables attackers to craft specific requests to inject OGNL expressions, potentially leading to remote code execution. This primarily affects applications using the legacy RESTful action mapper when the OGNL allowlist is ...

A vulnerability exists in the girishsaraf Online-Appointment-Booking-System due to an exploitable SQL injection in the AJAX Endpoint's getclinic.php file. The manipulation of the 'city/cid' parameter allows attackers to execute arbitrary SQL code remotely. As of now, there has been no official fi...

The Bricksforge plugin for WordPress is susceptible to a serious security flaw that allows unauthenticated users to upload arbitrary files. This vulnerability arises from inadequate validation of the 'temporaryFileUploads' parameter, specifically permitting attackers to exploit the AJAX endpoint ...

GNU gzip suffers from a global buffer overflow vulnerability in its LZH decompression logic. This vulnerability arises due to the improper reuse of a shared global state across different decompression formats within a single execution instance. Specifically, when decompressing a specially crafted...

A SQL injection vulnerability exists in the Admin CRUD Endpoint of girishsaraf's Online-Appointment-Booking-System, specifically within the 'deleteclinic.php' file. This flaw allows attackers to manipulate parameters, enabling unauthorized SQL commands to be executed. Exploiting this vulnerabilit...

A vulnerability has been identified in the Online-Appointment-Booking-System developed by Girishsaraf, specifically affecting the changebookingstatus.php file. The issue arises from improper handling of the parameter 'dateselected', allowing for SQL injection attacks. This vulnerability can be ex...

The yt-dlp-web-ui through version 4.0.0 contains a vulnerability in the Service.Formats JSON-RPC method, which allows unauthenticated remote attackers to exploit a NULL pointer dereference. By sending a specially crafted request that contains a URL parameter with a value such as --version, an att...

A security vulnerability exists in YouTransfer versions up to 0.0.7, 1.0.6, and 1.1.0 that allows an attacker to exploit an unknown function in the Template Rendering component located in the /settings/template file. This flaw enables remote path traversal, potentially allowing unauthorized acces...

A vulnerability exists in Action View where specially crafted accept headers can inadvertently expose the contents of arbitrary files located on the target system's filesystem, potentially leading to unauthorized access to sensitive information.

A command injection vulnerability has been identified in the HBAI-Ltd Toonflow-app, specifically within the Open Folder Endpoint. This flaw arises from improper handling of the argument path in the child_process.exec function in the file 'src/routes/setting/fileManagement/openFolder.ts'. Attacker...

A stack-based buffer overflow vulnerability has been identified in the TRENDnet TEW-432BRP router, specifically within the formTcpipSetup function in the /goform/formTcpipSetup file. This vulnerability allows for remote exploitation through manipulation of the Name argument. Although the vendor h...

A critical issue has been identified in Calcom Cal.com and Cal.diy, specifically in the Credentials Handler. The vulnerability arises from improper privilege management in the credentials.delete function located in the /api/trpc/credentials/delete file. This flaw allows for the manipulation of th...

A vulnerability exists in the AdithyaYelloju Restaurant-Management-System related to the function mysqli_query within the Order Management component. By manipulating the ID argument, an attacker can exploit this vulnerability to bypass authorization checks, potentially leading to unauthorized acc...

A vulnerability has been identified in the AdithyaYelloju Restaurant Management System affecting the password reset functionality through the file User/forgot3.php. An attacker can exploit this flaw by manipulating the email or password parameters, leading to SQL injection. This issue may allow u...

A critical vulnerability has been identified in the AdithyaYelloju Restaurant Management System, particularly affecting the login functionality located in User/login.php. This weakness can be exploited by manipulating the authentication parameters, specifically the email and password fields. Atta...

A vulnerability has been identified in the Wavlink WL-WN592AX6 device that affects the wmapd Daemon. This flaw enables remote attackers to manipulate command executions through the command injection, compromising the system integrity. Exploitation of this vulnerability could allow attackers to ex...

A security vulnerability exists in the Polaris Office App version 9.9.19 for Android, specifically in the Document Intake component. This flaw enables a local attacker to manipulate the _display_name argument, potentially allowing unauthorized access to the file system through path traversal. Use...

A security flaw has been identified in the SourceCodester Library Management System 1.0, specifically affecting the move_uploaded_file function in admin/add_admin.php. This vulnerability allows an attacker to manipulate the image upload argument, leading to unauthorized file uploads. The issue ca...

A security flaw exists in the SourceCodester E-Learning System version 1.0 within the save_users function of the Users.php file. This vulnerability allows attackers to manipulate the argument 'img' to perform unrestricted file uploads, leading to potential exploitation. The attack can be executed...

A vulnerability exists in the SourceCodester Contact Tracing System 1.0 that allows for unrestricted file uploads through a flaw in the 'move_uploaded_file' function in the 'Users.php' file. By manipulating the 'img/id' argument, an attacker can upload files of arbitrary types, potentially leadin...

A vulnerability in the SourceCodester Human Resource Management System 1.0 has been identified, specifically within the Employee Endpoint’s session_start function in the controller/employee.php file. This vulnerability allows for improper authentication due to the manipulation of parameters like ...

The WP-BusinessDirectory plugin for WordPress, up to version 4.0.2, features a flaw in its unauthenticated upload handler that does not adequately limit the type or destination of files that can be uploaded. This oversight permits unauthenticated users to upload files containing arbitrary content...

The WP Testimonials Plugin for WordPress prior to version 1.4.13 contains a vulnerability that enables users with the Author role and above to inject malicious JavaScript into testimonial content. This flaw occurs due to improper escaping of input, which effectively bypasses WordPress's built-in ...

A vulnerability exists in the D-Link DCS-930L B1.08B4 model that affects the emergency HTTP recovery server component. The flaw lies in the mpfd_decode function within the bootloader_region.bin file. An attacker could exploit this issue by manipulating the firmware argument, leading to improper v...

A vulnerability exists in the itsmeravitejak Online-Examination-System affecting the Registration Form component. Specifically, the function MySQLDB::addNewUser in the file include/database.php is susceptible to SQL injection due to improper manipulation of the argument branch. This flaw allows a...

A security flaw has been identified in the itsmeravitejak Online-Examination-System that affects the Session Handler component, particularly in the checkLogin function of session.php. This vulnerability allows for improper handling of login session arguments (cookname/cookid), enabling attackers ...

The web management service of MikroTik's RouterOS is affected by an integer underflow issue that can be exploited by an unauthenticated attacker. This vulnerability allows for manipulation of HTTP request bodies, which could lead to arbitrary code execution with root privileges or cause a denial ...

A vulnerability exists in the SourceCodester Performance Indicator System 1.0, specifically in the sales_history.php file. Manipulation of the argument ID can lead to SQL injection, allowing attackers to remotely exploit the system. This risk has been made public, increasing the potential for mal...

A security flaw has been identified in the SourceCodester Performance Indicator System 1.0, specifically within an unspecified function in the file /opils/staff/edit_credit.php. This vulnerability allows for SQL injection through manipulation of the 'credit' argument. The exploit can be executed ...

A security flaw has been identified in SourceCodester's Performance Indicator System 1.0, specifically within the processing of the file /opils/staff/product.php. This vulnerability arises when the input category is manipulated, thereby allowing an attacker to execute SQL injection attacks remote...

A vulnerability exists in the Performance Indicator System 1.0 developed by SourceCodester, specifically within the /opils/staff/edit_quantity.php file. An attacker can exploit this vulnerability through improper handling of the 'pqty' argument, leading to SQL injection. This remote exploitation ...

A security vulnerability exists in the SourceCodester Performance Indicator System version 1.0, specifically within the /opils/admin/addproduct.php file. The issue arises from improper handling of input parameters, allowing SQL injection attacks to be executed remotely. As a result, an attacker c...

A vulnerability exists in the Tiiny-AI PowerInfer's FFN GPU-split Loader within the create_striped_mat_to_gpu function, located in the ggml-cuda.cu file. This flaw leads to out-of-bounds read conditions that could be exploited locally. Attackers can leverage this vulnerability, which is already p...

A vulnerability has been discovered in the itsourcecode Online Cake Ordering System version 1.0, specifically affecting an unspecified function within the 'addtransacdetail.php' file. This flaw arises from improper handling of the ID argument, leading to potential SQL injection attacks. Exploitin...

A vulnerability has been discovered in TensorLayer, impacting versions up to 2.2.4. This issue is present in the load_hdf5_graph function of the utils.py file, specifically relating to HDF5 Loading. By manipulating the model_config argument, an attacker can perform remote deserialization attacks....

A security flaw has been identified in the TinyLLaVA_Factory product, specifically within the _load_text_config function located in the configuration_tinyllava.py file. This vulnerability allows an attacker to manipulate the 'llm_model_name_or_path' argument leading to potential code injection. I...

A SQL injection vulnerability has been identified in the Online Reviewer System 1.0 from Code-Projects. The affected component, User Update Handler, contains an unknown function located in the file /reviewer/system/system/admins/manage/users/btn_functions.php. This vulnerability could allow remot...

A vulnerability exists in Tiiny-AI PowerInfer, particularly in the GGUF Parser component's gguf_init_from_file function. This flaw results from improper handling of the data_offset argument, which can lead to an out-of-bounds read scenario. Attackers with local access could potentially exploit th...