Publicly Disclosed
PoC Exploits

A concurrency issue in the Apache HTTP Server's mod_http2 module can lead to the improper synchronization of resources, potentially allowing an attacker to execute remote code. This affects versions of the server from 2.4.55 to 2.4.70 and mod_h2 releases from 2.0.8 to 2.0.42, creating security ri...

A concurrency issue in the Apache HTTP Server's mod_http2 module can lead to the improper synchronization of resources, potentially allowing an attacker to execute remote code. This affects versions of the server from 2.4.55 to 2.4.70 and mod_h2 releases from 2.0.8 to 2.0.42, creating security ri...

An out of bounds write vulnerability in V8, the JavaScript engine of Google Chrome, potentially allows remote attackers to execute arbitrary code within the browser's sandboxed environment. This occurs when a specially crafted HTML page is processed, which triggers an unexpected write operation o...

A type confusion vulnerability has been identified in the V8 JavaScript engine of Google Chrome. Prior to version 152.0.7977.82, this flaw allows malicious attackers to execute arbitrary code within the browser's sandbox environment by crafting a specially designed HTML page. This vulnerability p...

A significant code execution vulnerability exists in the V8 engine of Google Chrome prior to version 146.0.7680.75. This flaw can be exploited by remote attackers through specially crafted HTML pages, allowing for arbitrary code execution within a sandbox environment. Such vulnerabilities pose se...

Adobe Acrobat Reader is impacted by a Prototype Pollution vulnerability that allows attackers to execute arbitrary code within the context of the current user. This flaw is triggered only when a user interacts with a malicious file, making user awareness essential. It is crucial for users to keep...

The ARForms plugin for WordPress is susceptible to an arbitrary file upload vulnerability due to improper handling of user-uploaded files. All versions up to and including 7.2.4 allow attackers to exploit the file upload functionality via a form file-upload handler. An attacker can craft a reques...

The Ninja Forms - File Uploads add-on for WordPress presents a security flaw that allows unauthenticated attackers to delete arbitrary files from a site's server. This vulnerability arises due to improper handling of client-supplied file data during uploads. Specifically, if an attacker omits the...

A vulnerability exists in the SourceCodester Smart Attendance System with QR Code Scanner version 1.0, specifically within the file reset_password.php. An unchecked manipulation of the 'Username' parameter enables attackers to perform cross-site scripting attacks remotely. This could lead to unau...

A security flaw exists in the Lanyulei Ferry application versions 1.0.0-beta.1 and 1.0.0, specifically within the JWT Validation component due to issues in the middleware/auth.go file. This vulnerability allows attackers to improperly authenticate, enabling potential unauthorized access through r...

A vulnerability in Google Chrome prior to version 145.0.7632.75 involves a use after free condition in the CSS component. This flaw enables remote attackers to execute arbitrary code within the browser's sandboxed environment by leveraging a carefully crafted HTML page. This highlights the import...

A critical vulnerability in Google Chrome prior to version 157.0.8103.50 allows remote attackers to execute arbitrary code within the browser's sandbox environment. This is achieved through a specially crafted HTML page that exploits a use after free situation in the XML parsing component, leadin...

An out of bounds read and write vulnerability exists in the V8 engine of Google Chrome prior to version 149.0.7827.103, allowing remote attackers to execute arbitrary code within a sandbox environment by utilizing a specially crafted HTML page. This vulnerability poses a significant risk, as it c...

An issue in Google Chrome's ANGLE and GPU components prior to version 138.0.7204.157 arises from insufficient validation of untrusted input. This flaw potentially enables a remote attacker to execute a sandbox escape by crafting a malicious HTML page. Users are encouraged to update their browsers...

A type confusion vulnerability in the V8 engine of Google Chrome allows a remote attacker to execute arbitrary read and write operations. This flaw can be exploited through specially crafted HTML pages, which may enable attackers to manipulate data and potentially compromise the security of affec...

A security vulnerability exists in Google Chrome versions before 137.0.7151.68, which allows remote attackers to exploit out-of-bounds read and write conditions in the V8 JavaScript engine. By crafting a specific HTML page, an attacker may manipulate heap memory, potentially leading to unauthoriz...

A vulnerability in the Mojo component of Google Chrome for Windows prior to version 134.0.6998.177 allows remote attackers to execute a sandbox escape via a specially crafted file. This potentially exposes users to various security risks as the attacker could execute code outside the intended sec...

VMware ESXi, Workstation, and Fusion are affected by an information disclosure vulnerability caused by an out-of-bounds read in the HGFS component. A malicious user with administrative access to a virtual machine could exploit this vulnerability to extract sensitive memory data from the vmx proce...

VMware ESXi and Workstation are susceptible to a Time-of-Check Time-of-Use (TOCTOU) vulnerability that can lead to out-of-bounds write conditions. This flaw allows local administrative users within a virtual machine to exploit the vulnerability and execute arbitrary code in the virtual machine's ...

Notepad++ versions prior to 8.8.9, when utilizing the WinGUp updater, exhibit a significant vulnerability where the integrity of update metadata and installers is not subjected to cryptographic verification. This flaw allows an attacker to intercept or alter update traffic, leading to the potenti...

The AIP-PUB ACPs-community's Discovery Server component, particularly the main.py file, has a vulnerability that allows unauthorized access due to missing authentication procedures. This can potentially expose sensitive functionalities to remote attackers, making it imperative for users to addres...

A vulnerability has been discovered in AIP-PUB's ACPs-community affecting versions up to 2.2.0. The flaw resides in the send_verification_code function of the verify-code Endpoint. By manipulating the phone argument, an attacker can bypass authentication mechanisms. This security issue can be exp...

A vulnerability exists in Google Chrome on Mac systems prior to version 143.0.7499.110 due to improper handling of memory access. This flaw allows a remote attacker to exploit crafted HTML content, leading to potential unauthorized access to system memory. This vulnerability highlights the import...

A type confusion vulnerability in the V8 engine of Google Chrome prior to version 142.0.7444.175 may allow a remote attacker to exploit heap corruption through a specially crafted HTML page. This could lead to unintended behaviors and potentially compromise the security of the browser environment.

This vulnerability arises from improper handling of quoting syntax in PostgreSQL libpq functions, which can allow SQL injection through specific usage patterns. Attackers can leverage this flaw when application input from these functions is used improperly, especially in the construction of comma...

A type confusion issue was discovered in the V8 JavaScript engine of Google Chrome, which could enable a remote attacker to trigger heap corruption through the use of a specially crafted HTML page. This vulnerability may allow unauthorized actions, potentially leading to significant impacts on us...

A critical vulnerability in Adobe Acrobat Reader, tracked as CVE-2023-26369, has been actively exploited in the wild. The vulnerability allows for arbitrary code execution when a specially crafted PDF document is opened by the user, impacting both Windows and macOS versions. The severity of the v...

Adobe Acrobat Reader is affected by a Use After Free vulnerability that can lead to arbitrary code execution in the context of the user running the software. The exploitation of this vulnerability necessitates user engagement, specifically requiring the opening of a malicious file by the victim. ...

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the c...

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the cont...

Adobe Acrobat and Reader are susceptible to a use-after-free vulnerability that may allow attackers to execute arbitrary code on compromised systems. This vulnerability affects several versions of the software, enabling potential exploitation through crafted files that leverage the memory managem...

Adobe Acrobat and Reader prior to specified versions are vulnerable to a double free issue. This flaw could allow attackers to exploit the affected applications, potentially executing arbitrary code under the rights of the current user. Users should update to the latest versions to mitigate this ...

A vulnerability in the SMB Service of the Linksys EA8100 version 1.0.3.216940 has been identified, which stems from improper initialization when manipulating the ANON_ACCESS argument in the script located at etc/init.d/service_smbd.sh. This flaw allows for potential remote attacks, as the exploit...

A vulnerability in the Linksys EA8100 router's Web UI allows for the manipulation of cookies that lack the 'httponly' flag. This oversight exposes sensitive data and could enable remote attackers to exploit the system. While the attack complexity is deemed high, the exploit is publicly available,...

A vulnerability exists in the Microsoft Windows App Store that allows an authorized attacker to exploit an untrusted search path, potentially enabling the attacker to elevate their privileges locally. This poses a risk of unauthorized modifications and access to sensitive areas of the operating s...

A critical security issue has been identified in the Linksys EA8100 router's JNAP API, specifically in version 1.0.3.216940. The vulnerability arises from the SetRemoteSetting and SetUnsecuredWiFiWarning functions within the ui_server.lua file, which allow remote attackers to exploit missing auth...

A vulnerability in the JSON-RPC web services interface of Extreme Networks Switch Engine (EXOS) presents a significant risk by allowing low-privileged users to execute restricted CLI show commands. This exploitation leads to the unintended disclosure of sensitive information, such as device confi...

A significant vulnerability exists in the Linksys EA8100 Router that allows an attacker to bypass authentication restrictions due to improper handling of excessive login attempts. The flaw is located in the /jnap/core/CheckAdminPassword file, where the system fails to appropriately limit the numb...

The Linksys EA8100 contains a vulnerability within the JNAP API functions, specifically GetWANStatus, GetWANStatus3, and IsAdminPasswordDefault. This vulnerability permits attackers to gain unauthorized access due to the absence of proper authentication. The exploit can be executed remotely, whic...

WinRAR 5.61 is susceptible to a denial of service vulnerability that can be exploited by local attackers. By inserting a malformed 'winrar.lng' language file into the application’s installation directory, an attacker can induce a crash. The vulnerability manifests when the application attempts to...

A heap-based buffer overflow vulnerability exists in Microsoft Color Management, which could allow an attacker to execute code locally without authorization. This security flaw is critical to address as it can lead to unauthorized actions within the affected system, emphasizing the importance of ...

The Xiaomi Mi Browser Android Application contains a path traversal vulnerability in the ThirdDocViewerActivity component. This flaw arises when the CopyExternalFile.copyFromUri() function processes content provider streams using an unsanitized filename derived from the _display_name column. As a...

The Sendcloud for WooCommerce plugin version 1.0.41 has a missing authorization vulnerability that allows authenticated low-privileged users, such as Subscribers, to exploit AJAX actions (sc_support_get and sc_support_save) without adequate capability checks. This can be done directly or through ...

A vulnerability in the Image CAPTCHA plugin for Contact Form 7 and WPForms allows unauthenticated attackers to bypass CAPTCHA defenses. By exploiting a hardcoded static answer in the integration, attackers can submit a predetermined value ('kc_captcha=kc_human') to successfully validate their sub...

A vulnerability has been identified in OpenSSH, specifically for versions prior to 10.6p2, when utilized on Linux systems with musl libc and without PAM. This flaw allows for a password authentication bypass due to the misinterpretation of whether a string is meant to be a password hash. Conseque...

A concurrency issue in the Apache HTTP Server's mod_http2 module can lead to the improper synchronization of resources, potentially allowing an attacker to execute remote code. This affects versions of the server from 2.4.55 to 2.4.70 and mod_h2 releases from 2.0.8 to 2.0.42, creating security ri...

AppFlowy Cloud versions up to 0.9.64 are vulnerable to a stored cross-site scripting (XSS) issue. This vulnerability allows authenticated users to upload blobs with non-validated Content-Type headers. Once uploaded, these blobs can be served as active HTML content through unsecured retrieval endp...

A SQL injection vulnerability exists in the core of Ivanti Endpoint Manager prior to version 2024 SU8. This flaw allows a remote unauthenticated attacker to execute arbitrary code on the vulnerable system. Exploiting this vulnerability can lead to significant security risks, including unauthorize...

Samba versions 3.5.0 up to 4.6.4, along with specific earlier releases, contain a serious vulnerability where a malicious client can upload a shared library to a writable share. This exploit allows the server to load and execute the uploaded file, leading to unauthorized control and potential dam...

A security flaw in JeecgBoot versions up to 3.9.5 exposes the function OpenApiController.call within the Authentication Filter to server-side request forgery. This vulnerability allows attackers to exploit the function remotely, potentially leading to unauthorized access and data breaches. Notabl...