Publicly Disclosed
PoC Exploits

A security flaw has been identified in the mathurvishal CloudClassroom-PHP-Project, specifically affecting the /updateguest.php file. An unknown function within this file is susceptible to SQL injection due to manipulation of the 'gname/editassid' argument. This vulnerability can be exploited rem...

A significant cross-site scripting vulnerability has been detected in the mathurvishal CloudClassroom PHP Project, specifically within the Faculty Video Management component. This vulnerability is caused by improper handling of parameters in the managevideos2.php file, allowing attackers to manip...

The Testimonials Widget plugin for WordPress versions up to 4.0.4 is susceptible to an input validation vulnerability that permits unauthorized users to create and modify posts through the front-end testimonial submission form. This flaw arises from the absence of appropriate capability or owners...

The Testimonials Widget plugin for WordPress, up to version 4.0.4, fails to properly validate URLs supplied by users. This oversight allows unauthenticated individuals to manipulate the server into making requests to internal services and accessing the resulting data. As a result, sensitive infor...

The Optimole WordPress plugin versions prior to 4.2.13 has a security flaw that allows users with the Author role or higher to insert unescaped event-handler attributes into the video-player block. This occurs because the plugin fails to properly sanitize these attributes prior to rendering. As a...

The File Manager and FileOrganizer plugins for WordPress feature a vulnerability that fails to validate the origin of window messages on their admin screens. This oversight permits unauthenticated attackers to execute arbitrary JavaScript within the context of a logged-in administrator's session,...

The MCP Server for WordPress plugin prior to version 1.8.2 lacks a crucial object-level authorization check for its workflow REST routes. This deficiency enables users with the Contributor role to gain unauthorized access to sensitive information, disclosing titles and publication statuses of pos...

The MCP Server plugin for WordPress is susceptible to a permissions bypass vulnerability that allows users with Contributor roles to execute unauthorized actions. Specifically, the plugin fails to properly validate user capabilities when handling REST API requests related to workflow management. ...

The MCP Server plugin for WordPress, prior to version 1.8.2, contains an issue where it fails to properly verify the nonce for REST API calls authenticated via cookies under certain conditions manipulated by an attacker. This flaw could potentially be exploited by unauthenticated adversaries who ...

The WP Delicious WordPress plugin prior to version 1.10.8 is vulnerable due to improper validation of user-supplied data in recipe blocks. This flaw permits users with Contributor role or higher to inject arbitrary HTML tags, including potentially malicious script tags. As a result, these scripts...

The wp-review-slider-pro plugin for WordPress, in versions prior to 12.7.12, contains a vulnerability whereby an AJAX handler does not adequately check user capabilities. This oversight allows any authenticated user, such as a subscriber, to submit arbitrary review content that can later be displ...

The File Manager plugin for WordPress, versions prior to 8.0.5, is vulnerable due to its inability to restrict unauthenticated users from downloading sensitive database backup archives. This issue can lead to unauthorized access, potentially allowing malicious actors to download complete database...

The wp-review-slider-pro plugin for WordPress prior to version 12.7.12 contains a security flaw in its AJAX handler, which saves review submission forms. The vulnerability arises due to the lack of a proper capability check, enabling any authenticated user to manipulate live forms. This is furthe...

The wp-review-slider-pro plugin for WordPress prior to version 12.7.12 fails to properly sanitize user-supplied data in an AJAX handler, which allows authenticated users to execute SQL injection attacks. This vulnerability exposes sensitive database information to unauthenticated visitors, posing...

The Bluff Post WordPress plugin versions up to 1.1.1 is susceptible to SQL injection due to improper sanitization and escaping of parameters used in SQL queries. This vulnerability enables unauthenticated attackers to inject malicious SQL commands, potentially allowing them to access sensitive da...

The Team Members Plugin for WordPress, up to version 9.2, contains a significant vulnerability allowing unauthenticated users to access sensitive data through an AJAX action. This authorization flaw permits attackers to retrieve detailed information about team members, including email addresses a...

The WP Directory Kit plugin for WordPress, up to version 1.5.7, is subject to a vulnerability where it fails to properly sanitize and escape category and location fields. This oversight allows users with specific listing-management roles, who lack the unfiltered_html capability, to execute Stored...

A vulnerability has been identified in the kjd/idna library, particularly affecting the functionality of the `idna.encode()` method in version 3.6. This problem stems from the method's inadequate handling of specially crafted input strings, which can lead to significant computational overhead. Wh...

VMware vCenter features a directory traversal vulnerability in its Syslog server component. This flaw allows attackers with network access to exploit the vulnerability, potentially leading to unauthorized execution of arbitrary code. Proper safeguards and patching are essential to mitigate the ri...

MikroTik's RouterOS is vulnerable due to an argument-handling flaw in the SSH login process, specifically affecting usernames that start with a prohibited character. This flaw allows an attacker to manipulate the trusted RouterOS policy mask, facilitating privilege escalation. The exploitation of...

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vu...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

A vulnerability in the Linux kernel related to posix CPU timers can lead to a use-after-free condition due to a race in non-leader exec() scenarios. When a timer associated with a process is deleted while concurrently executing an exec() command, it can cause access to freed memory. Specifically,...

OpenMetadata versions up to 2.0.2 exhibit a server-side request forgery vulnerability in the URLValidator.validateURL function. This flaw arises from improper DNS hostname resolution and inadequate validation of internal addresses. Users with permissions to create or update EventSubscription can ...

ClipBucket versions prior to 5.5.3-#197 contain a vulnerability in the admin template editor that allows authenticated administrators with manage_template_access permission to exploit directory traversal sequences. This flaw enables the modification of executable PHP files by traversing outside o...

GNU libextractor prior to version 1.16 is susceptible to a privilege escalation vulnerability due to the improper handling of the LIBEXTRACTOR_PREFIX environment variable. This flaw allows a local attacker to exploit the system by loading plugins from an untrusted search path, potentially executi...

The TDuck Survey Form version 6.0 has a vulnerability that allows remote unauthenticated attackers to submit form entries without providing valid passwords. The application relies solely on client-side validation for write password enforcement, which can be bypassed through direct API access usin...

The TDuck Survey Form 6.0 has a significant information disclosure issue wherein the FormAuthUtils.hasPermission method operates in a fail-open mode. This flaw allows authenticated users to access submissions from forms that are no longer valid. Specifically, when a user provides a dataId for a p...

The TDuck Survey Form, up to version 6.0, is susceptible to an authorization bypass vulnerability. Non-admin authenticated users can exploit the FormThemeController endpoints to manipulate global form themes and categories. This allows them to add, modify, or delete themes and theme categories, w...

A cross site scripting vulnerability exists in Krayin Laravel-CRM versions up to 2.2.5, specifically in the Upload Functionality's ConfigurationForm::rules method. This issue can be exploited remotely, allowing attackers to inject scripts into web pages viewed by users. The vulnerability has been...

A vulnerability was identified in the Krayin Laravel-CRM framework affecting the User Management component. This issue arises from improper handling of the role_id argument in the UserController.php file, allowing unauthorized users to gain elevated privileges. The flaw can be exploited remotely,...

X-SpringBoot versions up to 6.0 include a hardcoded static master login verification code (172839) that is enabled by default in the database seed. This vulnerability enables unauthenticated attackers to authenticate as any user by simply providing the public master code along with a known email ...

The X-SpringBoot framework through version 6.0 is susceptible to an object-level authorization bypass in its user management functionality. This vulnerability allows sub-administrators to manage users without proper ownership verification. Attackers with user-management permissions can exploit th...

X-SpringBoot up to version 6.0 has a vulnerability in its application manager functionality that exposes sensitive appKey and appSecret credentials via an unauthenticated GET request. The flaw allows unauthorized attackers to access these credentials through the /application/manager/select endpoi...

A SQL injection vulnerability has been identified in the mathurvishal CloudClassroom-PHP-Project, specifically within the managevideos2.php file. This issue arises from the manipulation of the argument 'editassid', allowing remote attackers to execute unauthorized SQL commands. The software follo...

A vulnerability has been identified in the mathurvishal CloudClassroom-PHP-Project, specifically in the updatefaculty.php file. This flaw arises from improper validation of the 'fid' argument, allowing for SQL injection attacks that can be executed remotely. As the project employs a rolling relea...

A vulnerability has been identified in the mathurvishal CloudClassroom-PHP-Project, specifically in the Student Update Functionality located in the updatestudent.php file. This weakness, stemming from improper validation of user input, allows for SQL injection attacks through the manipulation of ...

A security vulnerability exists in the mathurvishal CloudClassroom-PHP-Project prior to version 5dadec098bfbbf3300d60c3494db3fb95b66e7be, specifically in the 'updatequery.php' file. This issue allows an attacker to manipulate the 'gid' argument, resulting in SQL injection that can be initiated re...

A vulnerability exists in the mathurvishal CloudClassroom-PHP-Project that allows for SQL injection through the Faculty Authentication component. This vulnerability specifically resides in the 'loginlinkfaculty.php' file, where improper handling of user input in the form of arguments 'fid/pass' c...

A significant security flaw has been found in the zhistaredu StarTraining product, specifically within the API-Docs Endpoint at the SecurityConfig.java file. This vulnerability allows for missing authentication, enabling remote attackers to exploit the system. The vulnerability pertains to an unk...

A significant vulnerability has been identified in the zhistaredu StarTraining product affecting the Druid Console component. The flaw exists in the 'anonymous' function located in the '/druid/index.html' file, where inadequate authentication controls can be exploited. Attackers may leverage this...

A vulnerability has been identified in the zhistaredu StarTraining software, specifically in the JWT Token Handler component. The issue arises from the UserLoginService.createToken function in application.yml, which leads to the use of hard-coded passwords due to improper handling of user_id and ...

A vulnerability exists in Zhonglun CloudPos, specifically in the OpenLocalBrowser function located in the JSBridge component. This vulnerability arises when an attacker manipulates the 'url' argument, leading to potential code injection, which can be executed remotely. The disclosure of this expl...

The Decepticon hacking agent from BitterSecurity is susceptible to a vulnerability due to improper handling of special-token literals in LLM messages generated during web crawls. In versions before 1.1.17, the system wraps results of agent reconnaissance without filtering these literals, allowing...

A deserialization flaw in the LangChain4j-agentic component impacts multiple pre-release versions, allowing remote exploitation if AgenticScope persistence is enabled. This issue was identified in the AgenticScopeSerializer.fromJson method and poses a risk where an attacker with write access to t...

A vulnerability has been identified in the Note Editor component of the sheshbabu zen product, specifically related to the use of the dangerouslySetInnerHTML function in NotesEditor.jsx. This issue allows an attacker to inject malicious scripts into a web page, leading to cross-site scripting (XS...

A vulnerability exists in the Automatic Update feature of Zhonglun CloudPOS 3.0, stemming from an inadequate implementation of the Program.cs file. Manipulating certain parameters—such as the version, URL, package key, or package name—can grant unauthorized access to channels that should be restr...

The ONT/Beacon device by Nokia features a critical input handling flaw in its unified WEBUI application. This vulnerability allows low-privileged authenticated users to exploit insufficient validation of user-supplied data, enabling them to execute arbitrary commands on the device's operating sys...

A vulnerability in Microsoft Office SharePoint permits an authorized attacker to execute code injection, enabling them to perform spoofing attacks over a network. This weakness poses significant risks as it can lead to unauthorized access and manipulation of sensitive information. Organizations u...

A serious backdoor vulnerability was discovered in vsftpd 2.3.4, affecting downloads made between June 30 and July 3, 2011. This vulnerability allows an attacker to exploit the software and open a remote shell on port 6200/tcp, granting unauthorized access to the system. It poses significant risk...