Publicly Disclosed
PoC Exploits

The vulnerability occurring in UNISOC's BootRom allows a possible unchecked write address, enabling local escalation of privilege without requiring additional execution privileges. This flaw poses a significant security risk, as it can be exploited by malicious actors to gain unauthorized access ...

An authentication flaw has been identified in macOS products, potentially allowing an attacker on the same network to gain unauthorized access to Screen Sharing services without presenting valid credentials. This vulnerability impacts versions such as macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, an...

A vulnerability has been discovered in OpenBoxes prior to version 0.9.3, specifically within the Product Supplier Edit Controller's RoleInterceptor.groovy file. This issue can result in improper authorization, allowing unauthorized access or manipulation from remote attackers. The exploit has bee...

A vulnerability in GitLab CE/EE versions prior to specific patch releases allows unauthorized users to execute mutations through GET requests due to flawed request validation mechanisms within the GraphQL multiplex query handling process. This could potentially lead to unauthorized data manipulat...

The User Profile Builder plugin for WordPress faces a significant vulnerability allowing unauthorized users to gain access to site administration. The flaw arises from the plugin's improper handling of user registration submissions with usernames that are 61–70 characters long. Specifically, the ...

A vulnerability exists within the PESpin file format parser of ClamAV, allowing an unauthenticated remote attacker to potentially cause a denial of service (DoS) condition. This issue arises from inadequate boundary checks for PESpin file content during the scanning process, which can lead to out...

An authorization bypass vulnerability exists in Typemill versions prior to 2.26.0, specifically affecting the media file download route. This flaw allows unauthorized users to access restricted files by submitting cleverly crafted path-equivalent URL variants. Attackers can exploit normalized pat...

A security flaw in the Cisco Secure Firewall Management Center's web interface may enable unauthenticated remote attackers to bypass authentication mechanisms. This enables the execution of arbitrary script files, potentially granting root access to the device’s operating system. The issue arises...

This vulnerability involves an information disclosure flaw in the Form Autofill component of Firefox and Firefox ESR. When exploited, it can reveal sensitive user data. Mozilla has addressed this issue in versions 150 of Firefox and 140.10 of Firefox ESR, emphasizing the importance of updating to...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A security flaw exists in the COMFAST CF-N1-S 2.6.0.1 related to the CGI interface, specifically within the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid. This vulnerability allows an attacker to manipulate the 'ssid' argument, potentially leading to remote co...

A vulnerability has been identified in Sonos Tract versions up to 0.23.4, specifically within the Tensor::from_raw_dt_align function in the ONNX Initializer Loader. This flaw allows for remote exploitation through manipulation resulting in incorrect buffer size calculations. The vulnerability has...

A vulnerability in the GGUF Tokenizer component of EricLBuehler Mistral.rs, specifically in the convert_gguf_to_hf_tokenizer function, exposes systems to out-of-bounds reads due to improper handling of parameters like eos_token_id, bos_token_id, and unknown_token_id. This issue, impacting version...

A vulnerability exists in the PHPGurukul Complaint Management System 1.0, specifically within the user/check_availability.php file. This weakness enables an attacker to manipulate the email argument, leading to SQL injection attacks. Such remote exploitation is possible and poses a significant ri...

A vulnerability found in the itsourcecode Hospital Management System version 1.0 affects the handling of the delid argument in the /viewbilling.php file. This flaw allows for remote SQL injection, which can potentially lead to unauthorized access to the database, manipulation of data, or exposure...

A vulnerability has been identified in the itsourcecode Hospital Management System version 1.0, specifically within the file /viewdepartment.php. This issue allows an attacker to manipulate the 'delid' parameter, resulting in SQL injection, which could enable remote exploitation. As the details o...

A SQL Injection vulnerability exists in the itsourcecode Hospital Management System version 1.0, specifically within an unknown function in the /viewroom.php file. This weakness allows attackers to manipulate input parameters, leading to unauthorized access to the database. Given that the exploit...

A vulnerability has been discovered in Webkul Bagisto that allows remote manipulation of specific arguments within the /customer/account/rma/store endpoint. This issue may lead to the enforcement of unintended behavioral workflows. The vendor has acknowledged that these problems were previously i...

This vulnerability allows unauthorized command execution in the GPU micronode, leading to potential memory corruption when a specific sequence of commands is executed. Attackers could exploit this weakness to disrupt system functionality or gain access to sensitive areas of memory, posing risks t...

A security vulnerability exists in the SourceCodester Class and Exam Timetabling System 1.0, specifically affecting the /edit_subject1.php file. An attacker can exploit this vulnerability by manipulating the ID parameter, leading to unauthorized SQL command execution. This remote attack vector ca...

A vulnerability exists in the SourceCodester Class and Exam Timetabling System version 1.0, specifically in the /edit_subject2.php file. This weakness allows for SQL injection attacks through manipulation of the 'ID' argument. The exploit can be executed remotely, exposing users to potential unau...

A security flaw has been identified in the SourceCodester Class and Exam Timetabling System version 1.0 located in the /BSHRM1.php file. This vulnerability allows for cross-site scripting (XSS) via manipulation of the course argument, which can lead to remote exploitation by attackers. The detail...

A vulnerability exists in the Go language's norm.Iter component where it fails to properly handle input containing invalid UTF-8 byte sequences. This oversight allows an attacker to exploit the input handling mechanism, potentially causing the system to enter an infinite loop. Such behavior can l...

A vulnerability exists in the SourceCodester Class and Exam Timetabling System 1.0 that allows attackers to execute cross-site scripting (XSS) via manipulation of parameters in the file /BSCE2.php. This security flaw may be exploited remotely, allowing an attacker to inject malicious scripts into...

A vulnerability in Apache Gravitino allows unauthenticated users to provide a malicious H2 JDBC URL via the testConnection API. This can lead to the execution of arbitrary Java code on the server due to improper handling of the INIT parameter in H2. This issue predominantly affects environments w...

A SQL injection vulnerability has been identified in the SourceCodester Pet Grooming Management Software (version 1.0). The flaw resides within the /admin/get_barcode_data.php file, where manipulations of the input argument 'barcode' can allow unauthorized remote attackers to execute arbitrary SQ...

A vulnerability in the TOTOLINK EX1200L router, specifically in the function setWizardCfg of the cstecgi.cgi file, allows for a null pointer dereference. This security flaw can be exploited remotely, leading to potential system instability or unauthorized access. Given that exploit code is public...

A vulnerability exists in the Password Configuration Handler of the TOTOLINK EX1200L router, specifically in the setPasswordCfg function of the cgi-bin/cstecgi.cgi file. This issue leads to a null pointer dereference, allowing remote attackers to exploit the vulnerability. Public disclosure of th...

A command injection vulnerability exists in the kylecui NetForensicMCP version 2.1.0, specifically within the execAsync function located in index.js. By manipulating the argument for the interface/protocol, an attacker can execute arbitrary commands remotely. This significant security flaw has be...

VMware vCenter features a directory traversal vulnerability in its Syslog server component. This flaw allows attackers with network access to exploit the vulnerability, potentially leading to unauthorized execution of arbitrary code. Proper safeguards and patching are essential to mitigate the ri...

A vulnerability exists in the Linux kernel's networking subsystem that allows for a race condition involving qdisc_rtab_list. This occurs when multiple CPU cores attempt to access and modify the same singly linked list of rate tables concurrently. The lack of proper synchronization mechanisms can...

The Phoca Cart extension for Joomla contains a vulnerability that allows unauthenticated attackers to exploit specific GET parameters ('a[]' and 's[]') on the public shop items page. By manipulating these parameters, attackers can create unfiltered SQL queries, leading to unauthorized access to s...

A security vulnerability exists in Wavlink network devices WN531P3 and WN535M1 due to improper handling of the HTTP_COOKIE argument within the export_pingortrace.cgi script. This flaw can be exploited remotely, leading to a stack-based buffer overflow, thereby allowing an attacker to potentially ...

A vulnerability exists in Kira-Pgr's PromptShopMCP Image-Toolkit-MCP-Server related to the function download_image in server.py. By manipulating the image_url parameter, an attacker can perform a server-side request forgery, enabling remote exploitation. The vulnerability has been publicized, yet...

An SQL injection vulnerability has been identified in the itsourcecode Hospital Management System version 1.0. The flaw arises from an unspecified function in the file /viewprescriptionrecord.php, where manipulation of the argument 'delid' allows attackers to execute arbitrary SQL queries. This v...

A security vulnerability in Open Asset Import Library Assimp's Bone Transformation Key Parser allows for buffer overflow due to improper handling of the transmatrix_count/pcBoneTransforms argument in the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7. This flaw can be exploited remote...

A vulnerability has been discovered in the Code-Projects Online Shopping System, specifically within the 'offersmail.php' file. This issue arises from improper handling of user input in the email argument, which makes it susceptible to cross-site scripting attacks. Remote attackers could exploit ...

A security flaw has been identified in Webkul Bagisto that impacts versions up to 2.4.4. This vulnerability arises from improper handling of the /admin/sales/rma/requests endpoint within the Backend Sales RMA component, enabling remote attackers to bypass authorization controls. Although the vend...

A vulnerability exists in Webkul Bagisto, specifically impacting versions up to 2.4.4. This flaw is located in the Backend Customer Behavior Data Endpoint, where manipulation of the argument ID can result in improper privilege management. This allows an attacker to potentially exploit the system ...

A cross-site scripting vulnerability exists in Webkul Bagisto versions up to 2.4.4 in the RMA Message Handler component. This weakness can be exploited by manipulating the 'Message' argument in the /customer/account/rma/send-message file, potentially allowing attackers to execute arbitrary script...

A vulnerability exists in Webkul Bagisto versions up to 2.4.4, specifically affecting the configuration management functionality located at /admin/configuration/cache-management/execute. By manipulating the 'action' argument, an unauthorized party could bypass expected permissions. This flaw enab...

The ShopSmart Loyalty for WooCommerce plugin version 1.0.0 lacks essential authorization checks for phone number lookups. This oversight permits unauthenticated users to access sensitive customer profiles by simply knowing a customer's phone number. Once accessed, an unauthorized individual can v...

The WooMS WordPress plugin, up to version 9.14, is susceptible to a vulnerability that allows an attacker to craft a malicious URL. This exploitation occurs due to improper validation of user-supplied URLs before executing them in server-side requests. Consequently, stored third-party integration...

A vulnerability exists in Webkul Bagisto prior to version 2.4.4 in the RMA State Validation component, specifically concerning the file /customer/account/rma/update-status. This issue enables a potential attacker to enforce behavioral workflows through unauthorized manipulation. The attack can be...

A vulnerability has been identified in the Orange View Limited DualSafe Password Manager & Digital Vault Extension for Chrome, specifically within the postMessage-based bridge function. This flaw allows attackers to potentially manipulate the component, leading to unauthorized information disclos...

Alaev SEO Tools Extension for Chrome versions up to 1.0.10 has a vulnerability in its Popup UI component, specifically in the addDiv function within src/popup.html. This vulnerability allows remote attackers to execute scripts in the context of the user’s browser, leading to potential unauthorize...

A vulnerability has been detected in the Adblock for Youtube Extension version 7.2.1 for Chrome, originating from a flaw in the updateDynamicRules function within contentscript.js. This vulnerability allows attackers to exploit the argument yt-anti-adblock-detected, which can lead to improper aut...

A security flaw in the jkawamoto mcp-florence2 plugin, specifically in the get_images function of src/mcp_florence2/__init__.py, allows for server-side request forgery. This vulnerability enables an attacker to manipulate input arguments and potentially exploit server weaknesses from remote locat...

A flaw exists in the jiantao88 Android MCP Server, specifically in the Command Execution function located in build/index.js. This vulnerability allows for OS command injection by manipulating parameters such as deviceId, packageName, permission, and extras[].key or extras[].value. The exploit is ...

A vulnerability has been identified in the EFM ipTIME A3004T router, specifically within the httpcon_check_session_url function associated with session validation. This flaw enables improper authentication, which could allow attackers to exploit the system remotely. The vulnerability has been mad...