CVE-2024-10000 to CVE-2024-10999

349 CVEs with public proof-of-concept exploits.

• CVE-2024-100091 PoCWebsite File Changes < 2.1.0 - Admin+ Authenticated SQL Injection
• CVE-2024-100101 PoCLearnPress < 4.2.7.2 - Admin+ Stored XSS
• CVE-2024-100211 PoCcode-projects Pharmacy Management System manage_purchase.php sql injection
• CVE-2024-100221 PoCcode-projects Pharmacy Management System manage_supplier.php sql injection
• CVE-2024-100231 PoCcode-projects Pharmacy Management System add_new_medicine.php sql injection
• CVE-2024-100241 PoCcode-projects Pharmacy Management System manage_medicine_stock.php sql injection
• CVE-2024-100271 PoCWP Booking Calendar < 10.6.3 - Admin+ Stored XSS
• CVE-2024-100432 PoCsIncorrect Authorization in GitLab
• CVE-2024-100541 PoCHappyforms < 1.26.3 - Admin+ Stored XSS
• CVE-2024-100691 PoCESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication sql injection
• CVE-2024-100701 PoCESAFENET CDG PolicyPushControlAction.java actionPolicyPush sql injection
• CVE-2024-100711 PoCESAFENET CDG EncryptPolicyService.java actionUpdateEncryptPolicyEdit sql injection
• CVE-2024-100721 PoCESAFENET CDG EncryptPolicyService.java actionAddEncryptPolicyGroup sql injection
• CVE-2024-100731 PoCflairNLP flair Mode File Loader clustering.py ClusteringModel code injection
• CVE-2024-100751 PoCJetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution
• CVE-2024-100761 PoCJetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS
• CVE-2024-100811 PoCCodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication…
• CVE-2024-100981 PoCApplyOnline – Application Form Builder and Manager < 2.6.3 - Unauthenticated Application File Access
• CVE-2024-101021 PoCPhoto Gallery, Images, Slider in Rbs Image Gallery < 3.2.22 - Contributor+ Stored XSS
• CVE-2024-101031 PoCMailPoet < 5.3.2 - Admin+ Stored XSS
• CVE-2024-101041 PoCJobs for WordPress < 2.7.8 - Contributor+ Stored XSS
• CVE-2024-101051 PoCJobs for WordPress < 2.7.11 - Contributor+ Stored XSS
• CVE-2024-101071 PoCGiveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSS
• CVE-2024-101201 PoCwfh45678 Radar upload unrestricted upload
• CVE-2024-101211 PoCwfh45678 Radar Interface authorization
• CVE-2024-101231 PoCTenda AC8 saveParentControlInfo compare_parentcontrol_time stack-based overflow
• CVE-2024-101242 PoCsVayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin…
• CVE-2024-101291 PoCHFO4 shudong-share Share create_share.php sql injection
• CVE-2024-101301 PoCTenda AC8 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow
• CVE-2024-101331 PoCESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority sql injection
• CVE-2024-101341 PoCESAFENET CDG MultiServerAjax.java connectLogout sql injection
• CVE-2024-101351 PoCESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection
• CVE-2024-101361 PoCcode-projects Pharmacy Management System manage_invoice.php sql injection
• CVE-2024-101371 PoCcode-projects Pharmacy Management System manage_medicine.php sql injection
• CVE-2024-101381 PoCcode-projects Pharmacy Management System add_new_purchase.php sql injection
• CVE-2024-101391 PoCcode-projects Pharmacy Management System add_new_supplier.php sql injection
• CVE-2024-101402 PoCscode-projects Pharmacy Management System manage_supplier.php sql injection
• CVE-2024-101411 PoCjsbroks COCO Annotator Session predictable state
• CVE-2024-101421 PoCcode-projects Blood Bank System viewrequest.php cross site scripting
• CVE-2024-101431 PoCMB Custom Post Types & Custom Taxonomies < 2.7.7 - Admin+ Stored XSS
• CVE-2024-101441 PoCPhoto Gallery, Images, Slider in Rbs Image Gallery < 3.2.22 - Contributor+ Stored XSS
• CVE-2024-101451 PoCHubbub Lite < 1.34.4 - Admin+ Stored XSS
• CVE-2024-101462 PoCsSimple File List < 6.1.13 - Reflected Cross-Site Scripting
• CVE-2024-101491 PoCSocial Slider Feed < 2.2.9 - Admin+ Stored XSS via Widgets
• CVE-2024-101511 PoCAuto iFrame < 2.0 - Contributor+ XSS via Shortcode
• CVE-2024-101522 PoCsSimple Certain Time to Show Content < 1.3.1 - Reflected XSS
• CVE-2024-101531 PoCPHPGurukul Boat Booking System Book a Boat Page book-boat.php sql injection
• CVE-2024-101541 PoCPHPGurukul Boat Booking System Check Booking Status Page status.php sql injection
• CVE-2024-101551 PoCPHPGurukul Boat Booking System Book a Boat Page book-boat.php cross site scripting
• CVE-2024-101561 PoCPHPGurukul Boat Booking System Sign In Page index.php sql injection
• CVE-2024-101571 PoCPHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injection
• CVE-2024-101581 PoCPHPGurukul Boat Booking System session_start session fixiation
• CVE-2024-101591 PoCPHPGurukul Boat Booking System My Profile Page profile.php sql injection
• CVE-2024-101601 PoCPHPGurukul Boat Booking System BW Dates Report Page bwdates-report-details.php sql injection
• CVE-2024-101611 PoCPHPGurukul Boat Booking System Update Boat Image Page change-image.php unrestricted upload
• CVE-2024-101621 PoCPHPGurukul Boat Booking System Edit Subdomain Details Page edit-subadmin.php sql injection
• CVE-2024-101631 PoCSourceCodester Sentiment Based Movie Rating System movie_details.php sql injection
• CVE-2024-101651 PoCCodezips Sales Management System deletecustcom.php sql injection
• CVE-2024-101661 PoCCodezips Sales Management System checkuser.php sql injection
• CVE-2024-101671 PoCCodezips Sales Management System deletecustind.php sql injection
• CVE-2024-101691 PoCcode-projects Hospital Management System change-password.php sql injection
• CVE-2024-101701 PoCcode-projects Hospital Management System get_doctor.php sql injection
• CVE-2024-101711 PoCcode-projects Blood Bank System massage.php sql injection
• CVE-2024-101731 PoCdidi DDMQ Console Module improper authentication
• CVE-2024-101911 PoCPHPGurukul Boat Booking System Booking Details Page book-details.php cross site scripting
• CVE-2024-101921 PoCPHPGurukul IFSC Code Finder Project search.php cross site scripting
• CVE-2024-101931 PoCWAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection
• CVE-2024-101941 PoCWAVLINK WN530H4/WN530HG4/WN572HG3 Front-End Authentication Page login.cgi Goto_chidx stack-based overflow
• CVE-2024-101961 PoCcode-projects Pharmacy Management System add_new_invoice.php sql injection
• CVE-2024-101971 PoCcode-projects Pharmacy Management System Manage Supplier Page manage_supplier.php cross site scripting
• CVE-2024-101981 PoCcode-projects Pharmacy Management System Manage Customer Page manage_customer.php cross site scripting
• CVE-2024-101991 PoCcode-projects Pharmacy Management System Manage Medicines Page manage_medicine.php cross site scripting
• CVE-2024-102191 PoCIncorrect Authorization in GitLab
• CVE-2024-102206 PoCsArbitrary command execution through gitRepo volume
• CVE-2024-102241 PoCQualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could…
• CVE-2024-102451 PoCRelais 2FA <= 1.0 - Authentication Bypass
• CVE-2024-102771 PoCESAFENET CDG UsbKeyAjax.java sql injection
• CVE-2024-102781 PoCESAFENET CDG ReUserOrganiseService.java sql injection
• CVE-2024-102791 PoCESAFENET CDG PrintPolicyService.java sql injection
• CVE-2024-102801 PoCTenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference
• CVE-2024-102811 PoCTenda RX9/RX9 Pro SetStaticRouteCfg sub_42EEE0 stack-based overflow
• CVE-2024-102821 PoCTenda RX9/RX9 Pro SetVirtualServerCfg sub_42EA38 stack-based overflow
• CVE-2024-102831 PoCTenda RX9/RX9 Pro SetNetControlList sub_4337EC stack-based overflow
• CVE-2024-102901 PoCZZCMS inc.php information disclosure
• CVE-2024-102911 PoCZZCMS phome.php Ebak_DotranExecutSQL sql injection
• CVE-2024-102921 PoCZZCMS ChangeTable.php unrestricted upload
• CVE-2024-102931 PoCZZCMS functions.php Ebak_SetGotoPak unrestricted upload
• CVE-2024-103071 PoCAllocation of Resources Without Limits or Throttling in GitLab
• CVE-2024-103091 PoCTracking Code Manager < 2.4.0 - Contributor+ Stored XSS
• CVE-2024-103351 PoCSourceCodester Garbage Collection Management System login.php sql injection
• CVE-2024-103481 PoCSourceCodester Best House Rental Management System Manage Tenant Details index.php cross site scripting
• CVE-2024-103491 PoCSourceCodester Best House Rental Management System ajax.php delete_tenant sql injection
• CVE-2024-103501 PoCcode-projects Hospital Management System add-doctor.php sql injection
• CVE-2024-103511 PoCTenda RX9 Pro POST Request setMacFilterCfg sub_424CE0 stack-based overflow
• CVE-2024-103531 PoCSourceCodester Online Exam System admin-dashboard access control
• CVE-2024-103543 PoCsSourceCodester Petrol Pump Management Software print.php sql injection
• CVE-2024-103553 PoCsSourceCodester Petrol Pump Management Software invoice.php sql injection
• CVE-2024-103621 PoCSocial Media Share Buttons < 2.9.0 - Admin+ Stored XSS
• CVE-2024-103681 PoCCodezips Sales Management System addstock.php sql injection
• CVE-2024-103691 PoCCodezips Sales Management System addcustcom.php sql injection
• CVE-2024-103701 PoCCodezips Sales Management System addcustind.php sql injection
• CVE-2024-103711 PoCSourceCodester Payroll Management System main login buffer overflow
• CVE-2024-103721 PoCchidiwilliams buzz model_loader.py download_model temp file
• CVE-2024-103761 PoCESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injection
• CVE-2024-103771 PoCESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection
• CVE-2024-103781 PoCESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile sql injection
• CVE-2024-103791 PoCESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal
• CVE-2024-103801 PoCSourceCodester Petrol Pump Management Software ajax_product.php sql injection
• CVE-2024-103831 PoCImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork
• CVE-2024-104002 PoCsTutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
• CVE-2024-104061 PoCSourceCodester Petrol Pump Management Software edit_fuel.php sql injection
• CVE-2024-104071 PoCSourceCodester Petrol Pump Management Software edit_customer.php sql injection
• CVE-2024-104081 PoCcode-projects Blood Bank Management abs.php sql injection
• CVE-2024-104091 PoCcode-projects Blood Bank Management accept.php sql injection
• CVE-2024-104103 PoCsSourceCodester Online Hotel Reservation System controller.php upload unrestricted upload
• CVE-2024-104111 PoCSourceCodester Online Hotel Reservation System controller.php doCheckout sql injection
• CVE-2024-104121 PoCPoco-z Guns-Medical File Upload upload cross site scripting
• CVE-2024-104131 PoCSourceCodester Online Hotel Reservation System update.php upload unrestricted upload
• CVE-2024-104141 PoCPHPGurukul Vehicle Record System edit-brand.php cross site scripting
• CVE-2024-104151 PoCcode-projects Blood Bank Management System accept.php sql injection
• CVE-2024-104161 PoCcode-projects Blood Bank Management System cancel.php sql injection
• CVE-2024-104171 PoCcode-projects Blood Bank Management System delete.php sql injection
• CVE-2024-104181 PoCcode-projects Blood Bank Management System infoAdd.php sql injection
• CVE-2024-104191 PoCcode-projects Blood Bank Management System bloodrequest.php cross site scripting
• CVE-2024-104201 PoCSourceCodester Attendance and Payroll System update.php upload unrestricted upload
• CVE-2024-104211 PoCSourceCodester Attendance and Payroll System overtime_row.php sql injection
• CVE-2024-104221 PoCSourceCodester Attendance and Payroll System overtime_add.php sql injection
• CVE-2024-104231 PoCProject Worlds Student Project Allocation System Project Selection Page project_selection.php sql injection
• CVE-2024-104241 PoCProject Worlds Student Project Allocation System Project Selection Page remove_project.php sql injection
• CVE-2024-104251 PoCProject Worlds Student Project Allocation System Project Selection Page move_up_project.php sql injection
• CVE-2024-104261 PoCCodezips Pet Shop Management System animalsadd.php sql injection
• CVE-2024-104271 PoCCodezips Pet Shop Management System deleteanimal.php sql injection
• CVE-2024-104281 PoCWAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection
• CVE-2024-104291 PoCWAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection
• CVE-2024-104301 PoCCodezips Pet Shop Management System animalsupdate.php sql injection
• CVE-2024-104311 PoCCodezips Pet Shop Management System deletebird.php sql injection
• CVE-2024-104321 PoCProject Worlds Simple Web-Based Chat Application index.php sql injection
• CVE-2024-104331 PoCProject Worlds Simple Web-Based Chat Application index.php cross site scripting
• CVE-2024-104341 PoCTenda AC1206 ate ate_Tenda_mfg_check_usb3 stack-based overflow
• CVE-2024-104351 PoCdidi Super-Jacoco triggerEnvCov command injection
• CVE-2024-104421 PoCOff-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423…
• CVE-2024-104431 PoCImproper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in…
• CVE-2024-104461 PoCProject Worlds Online Time Table Generator admindashboard.php sql injection
• CVE-2024-104482 PoCscode-projects Blood Bank Management System delete.php cross-site request forgery
• CVE-2024-104491 PoCCodezips Hospital Appointment System loginAction.php sql injection
• CVE-2024-104501 PoCSourceCodester Kortex Lite Advocate Office Management System POST Parameter edit_profile.php sql injection
• CVE-2024-104701 PoCWPLMS Learning Management System for WordPress <= 4.962 - Unauthenticated Arbitrary File Read and Deletion
• CVE-2024-104711 PoCEverest Forms < 3.0.4.2 - Admin+ Stored XSS
• CVE-2024-104721 PoCStylish Price List < 7.1.12 - Contributor+ Stored XSS
• CVE-2024-104731 PoCLogo Slider < 4.5.0 - Author+ Stored XSS
• CVE-2024-104751 PoCLead Form Builder < 1.9.8 - Admin+ Stored XSS
• CVE-2024-104771 PoCLinZhaoguan pb-cms Permission Management Page admin#permissions cross site scripting
• CVE-2024-104781 PoCLinZhaoguan pb-cms Edit Article edit cross site scripting
• CVE-2024-104791 PoCLinZhaoguan pb-cms Theme Management Module admin#themes cross site scripting
• CVE-2024-104801 PoC3DPrint Lite < 2.1 - Settings Update via CSRF
• CVE-2024-104821 PoCMedia Library Tools < 1.5.0 - Author+ Stored XSS via SVG
• CVE-2024-104831 PoCSimplePress Forum < 6.10.11 - Reflected XSS
• CVE-2024-104861 PoCGoogle for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File
• CVE-2024-104911 PoCPreload arbitrary resources by injecting additional `Link` headers
• CVE-2024-104931 PoCElement Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS
• CVE-2024-104991 PoCAI-Engine < 2.6.5 - Admin+ SQLi
• CVE-2024-105011 PoCESAFENET CDG ExamCDGDocService.java findById sql injection
• CVE-2024-105021 PoCESAFENET CDG FileDirectoryService.java getOneFileDirectory sql injection
• CVE-2024-105041 PoCARForms Builder < 1.7.1 - Unauthenticated Stored XSS
• CVE-2024-105051 PoCwuzhicms block.php edit code injection
• CVE-2024-105061 PoCcode-projects Blood Bank System B-.php sql injection
• CVE-2024-105071 PoCCodezips Free Exam Hall Seating Management System login.php sql injection
• CVE-2024-105083 PoCsRegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password…
• CVE-2024-105091 PoCCodezips Online Institute Management System login.php sql injection
• CVE-2024-105101 PoCadBuddy+ (AdBlocker Detection) by NetfunkDesign <= 1.1.3 - Admin+ Stored XSS
• CVE-2024-105111 PoCCWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interfacewhen someone on the local…
• CVE-2024-105151 PoCSEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSS
• CVE-2024-105162 PoCsSwift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
• CVE-2024-105171 PoCProfilePress < 4.15.15 - Admin+ Stored XSS
• CVE-2024-105181 PoCProfilePress < 4.15.15 - Admin+ Stored XSS
• CVE-2024-105422 PoCsSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary…
• CVE-2024-105451 PoCNextGEN Gallery < 3.59.9 - Admin+ Stored XSS
• CVE-2024-105461 PoCopen-scratch Teaching 在线教学平台 URL getDictItemsByTable sql injection
• CVE-2024-105511 PoCSticky Social Icons <= 1.2.1 - Admin+ Stored XSS
• CVE-2024-105541 PoCWP-Advanced-Search < 3.3.9.3 - Admin+ Stored XSS
• CVE-2024-105551 PoCMaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width
• CVE-2024-105561 PoCCodezips Pet Shop Management System birdsadd.php sql injection
• CVE-2024-105571 PoCcode-projects Blood Bank Management System updateprofile.php cross-site request forgery
• CVE-2024-105581 PoCForm Maker by 10Web < 1.15.30 - Admin+ Stored XSS
• CVE-2024-105591 PoCSourceCodester Airport Booking Management System details buffer overflow
• CVE-2024-105601 PoCForm Maker by 10Web < 1.15.30 - Admin+ Stored XSS
• CVE-2024-105611 PoCCodezips Pet Shop Management System birdsupdate.php sql injection
• CVE-2024-105621 PoCForm Maker by 10Web < 1.15.31 - Admin+ Stored XSS
• CVE-2024-105631 PoCWooCommerce Cart Count Shortcode < 1.1.0 - Contributor+ XSS
• CVE-2024-105651 PoCSlider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget
• CVE-2024-105661 PoCSlider by 10Web < 1.2.62 - Contributor+ Stored XSS
• CVE-2024-105681 PoCAjax Search Lite < 4.12.4 - Admin+ Stored XSS
• CVE-2024-105712 PoCsChartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
• CVE-2024-105781 PoCPubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin Installation
• CVE-2024-105862 PoCsDebug Tool <= 2.2 - Unauthenticated Arbitrary File Creation
• CVE-2024-105941 PoCESAFENET CDG FileDirectoryService.java docHistory sql injection
• CVE-2024-105951 PoCESAFENET CDG PublicDocInfoAjax.java delDifferCourseList sql injection
• CVE-2024-105961 PoCESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injection
• CVE-2024-105971 PoCESAFENET CDG PolicyActionService.java delPolicyAction sql injection
• CVE-2024-105981 PoCTongda OA Annual Leave data.php improper authorization
• CVE-2024-105991 PoCTongda OA 2017 package_static_resources.php resource consumption
• CVE-2024-106001 PoCTongda OA 2017 submenu.php sql injection
• CVE-2024-106011 PoCTongda OA 2017 delete.php sql injection
• CVE-2024-106021 PoCTongda OA 2017 data_picker_link.php sql injection
• CVE-2024-106052 PoCscode-projects Blood Bank Management System request.php cross-site request forgery
• CVE-2024-106071 PoCcode-projects Courier Management System track-result.php sql injection
• CVE-2024-106081 PoCcode-projects Courier Management System login.php sql injection
• CVE-2024-106091 PoCitsourcecode Tailoring Management System Project typeadd.php sql injection
• CVE-2024-106101 PoCESAFENET CDG ProtocolService.java delProtocol sql injection
• CVE-2024-106111 PoCESAFENET CDG PrintScreenListService.java delProtocol sql injection
• CVE-2024-106121 PoCESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injection
• CVE-2024-106131 PoCESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injection
• CVE-2024-106151 PoCTongda OA 2017 delete_data_attach.php sql injection
• CVE-2024-106161 PoCTongda OA webSignSubmit.php sql injection
• CVE-2024-106171 PoCTongda OA check_seal.php sql injection
• CVE-2024-106181 PoCTongda OA 2017 record_detail.php sql injection
• CVE-2024-106191 PoCTongda OA 2017 next_detail.php sql injection
• CVE-2024-106201 PoCknightliao Disconf Configuration Center list improper authentication
• CVE-2024-106281 PoCQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id
• CVE-2024-106292 PoCsGPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation
• CVE-2024-106311 PoCCountdown Timer <= 1.0.5 - Contributor+ Stored XSS
• CVE-2024-106321 PoCNokaut Offers Box <= 1.4.0 - Admin+ Stored XSS
• CVE-2024-106341 PoCNokaut Offers Box <= 1.4.0 - Plugin Reset via CSRF
• CVE-2024-106371 PoCKadence Blocks < 3.2.54 - Admin+ Stored XSS
• CVE-2024-106381 PoCProduct Labels For Woocommerce < 1.5.11 - Admin+ SQLi
• CVE-2024-106391 PoCAuto Prune Posts < 3.0.0- Admin+ Stored XSS
• CVE-2024-106541 PoCTOTOLINK LR350 formLoginAuth.htm authorization
• CVE-2024-106551 PoCTongda OA 2017 new.php sql injection
• CVE-2024-106561 PoCTongda OA 2017 apply.php sql injection
• CVE-2024-106571 PoCTongda OA prcs_info.php sql injection
• CVE-2024-106581 PoCTongda OA check_seal.php sql injection
• CVE-2024-106591 PoCESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection
• CVE-2024-106601 PoCESAFENET CDG HookService.java deleteHook sql injection
• CVE-2024-106611 PoCTenda AC15 SetDlnaCfg stack-based overflow
• CVE-2024-106621 PoCTenda AC15 SetOnlineDevName formSetDeviceName stack-based overflow
• CVE-2024-106731 PoCTop Store <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
• CVE-2024-106741 PoCTh Shop Mania <= 1.4.9 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
• CVE-2024-106771 PoCBTEV <= 2.0.2 - Settings Update via CSRF
• CVE-2024-106781 PoCUltimate Blocks < 3.2.4 - Contributor+ Stored XSS
• CVE-2024-106791 PoCQuiz and Survey Master (QSM) < 9.2.1 - Author+ Stored XSS
• CVE-2024-106801 PoCForm Maker by 10Web < 1.15.32 - Admin+ Stored XSS
• CVE-2024-106971 PoCTenda AC6 API Endpoint WriteFacMac formWriteFacMac command injection
• CVE-2024-106981 PoCTenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow
• CVE-2024-106991 PoCcode-projects Wazifa System logincontrol.php sql injection
• CVE-2024-107001 PoCcode-projects University Event Management System submit.php sql injection
• CVE-2024-107011 PoCPHPGurukul Car Rental Portal search.php cross site scripting
• CVE-2024-107021 PoCcode-projects Simple Car Rental System signup.php sql injection
• CVE-2024-107031 PoCRegistrations for The Events Calendar < 2.13.4 - Admin+ Stored XSS
• CVE-2024-107041 PoCPhoto Gallery by 10Web < 1.8.31 - Admin+ Stored XSS
• CVE-2024-107061 PoCDownload Manager < 3.3.03 - Admin+ Stored XSS
• CVE-2024-107082 PoCsSystem Dashboard < 2.8.15 - Admin+ Path Traversal
• CVE-2024-107091 PoCYaDisk Files <= 1.2.5 - Contributor+ Stored XSS via Shortcode
• CVE-2024-107101 PoCYaDisk Files <= 1.2.5 - Admin+ Stored XSS
• CVE-2024-107281 PoCPostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation
• CVE-2024-107301 PoCTongda OA web_show.php sql injection
• CVE-2024-107311 PoCTongda OA check_seal.php sql injection
• CVE-2024-107321 PoCTongda OA 2017 index.php sql injection
• CVE-2024-107331 PoCcode-projects Restaurant Order System login.php sql injection
• CVE-2024-107341 PoCProject Worlds Life Insurance Management System editPayment.php sql injection
• CVE-2024-107351 PoCProject Worlds Life Insurance Management System editNominee.php sql injection
• CVE-2024-107361 PoCCodezips Free Exam Hall Seating Management System student.php sql injection
• CVE-2024-107371 PoCCodezips Free Exam Hall Seating Management System teacher.php sql injection
• CVE-2024-107381 PoCitsourcecode Farm Management System manage-breed.php sql injection
• CVE-2024-107391 PoCcode-projects E-Health Care System adminlogin.php sql injection
• CVE-2024-107401 PoCcode-projects E-Health Care System consulting_detail.php sql injection
• CVE-2024-107411 PoCcode-projects E-Health Care System registration.php sql injection
• CVE-2024-107421 PoCcode-projects Wazifa System control.php sql injection
• CVE-2024-107431 PoCPHPGurukul Online Shopping Portal editable_ajax.php cross site scripting
• CVE-2024-107441 PoCPHPGurukul Online Shopping Portal complex_header_2.php cross site scripting
• CVE-2024-107451 PoCPHPGurukul Online Shopping Portal deferred_table.php cross site scripting
• CVE-2024-107461 PoCPHPGurukul Online Shopping Portal dom_data.php cross site scripting
• CVE-2024-107471 PoCPHPGurukul Online Shopping Portal dom_data_th.php cross site scripting
• CVE-2024-107491 PoCThinkAdmin Plugs.php script deserialization
• CVE-2024-107501 PoCTenda i22 SysToo websReadEvent null pointer dereference
• CVE-2024-107511 PoCCodezips ISP Management System pay.php sql injection
• CVE-2024-107521 PoCCodezips Pet Shop Management System productsadd.php sql injection
• CVE-2024-107531 PoCPHPGurukul Online Shopping Portal dom_data_two_headers.php cross site scripting
• CVE-2024-107541 PoCPHPGurukul Online Shopping Portal dymanic_table.php cross site scripting
• CVE-2024-107551 PoCPHPGurukul Online Shopping Portal empty_table.php cross site scripting
• CVE-2024-107561 PoCPHPGurukul Online Shopping Portal html_table.php cross site scripting
• CVE-2024-107571 PoCPHPGurukul Online Shopping Portal js_data.php cross site scripting
• CVE-2024-107582 PoCscode-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injection
• CVE-2024-107591 PoCitsourcecode Farm Management System edit-pig.php sql injection
• CVE-2024-107601 PoCcode-projects University Event Management System dodelete.php sql injection
• CVE-2024-107611 PoCUmbraco CMS Dashboard frame cross site scripting
• CVE-2024-107631 PoCCampress <= 1.35 - Unauthenticated Local File Inclusion
• CVE-2024-107641 PoCCodezips Online Institute Management System save_user.php unrestricted upload
• CVE-2024-107651 PoCCodezips Online Institute Management System profile.php unrestricted upload
• CVE-2024-107661 PoCCodezips Free Exam Hall Seating Management System save_user.php unrestricted upload
• CVE-2024-107681 PoCPHPGurukul Online Shopping Portal two_tables.php cross site scripting
• CVE-2024-107831 PoCMainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation
• CVE-2024-107911 PoCCodezips Hospital Appointment System doctorAction.php sql injection
• CVE-2024-107932 PoCsWP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
• CVE-2024-108051 PoCcode-projects University Event Management System doedit.php sql injection
• CVE-2024-108061 PoCPHPGurukul Hospital Management System betweendates-detailsreports.php cross site scripting
• CVE-2024-108071 PoCPHPGurukul Hospital Management System search.php cross site scripting
• CVE-2024-108081 PoCcode-projects E-Health Care System req_detail.php sql injection
• CVE-2024-108091 PoCcode-projects E-Health Care System chat.php sql injection
• CVE-2024-108101 PoCcode-projects E-Health Care System app_request.php sql injection
• CVE-2024-108111 PoCAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a…
• CVE-2024-108121 PoCOpen Redirect in binary-husky/gpt_academic
• CVE-2024-108151 PoCPostLists <= 2.0.2 - Reflected XSS
• CVE-2024-108181 PoCJSFiddle Shortcode < 1.1.3 - Contributor+ XSS via Shortcode
• CVE-2024-108211 PoCDenial of Service (DoS) in invoke-ai/invokeai
• CVE-2024-108381 PoCInteger Underflow in DDS_Security_Deserialize_ methods may lead to OOB read
• CVE-2024-108401 PoCromadebrian WEB-Sekolah Backend akun_edit.php cross site scripting
• CVE-2024-108411 PoCromadebrian WEB-Sekolah Mail Proses_Kirim.php sql injection
• CVE-2024-108421 PoCromadebrian WEB-Sekolah Backend Proses_Edit_Akun.php cross site scripting
• CVE-2024-108441 PoC1000 Projects Bookstore Management System search.php sql injection
• CVE-2024-108451 PoC1000 Projects Bookstore Management System book_detail.php sql injection
• CVE-2024-108582 PoCsJetpack 13.0-14.0 - Unauthenticated DOM-XSS
• CVE-2024-108921 PoCCost Calculator Builder < 3.2.43 - Settings update via CSRF
• CVE-2024-108931 PoCWP Booking Calendar < 10.6.5 - Admin+ Stored XSS
• CVE-2024-108961 PoCLogo Slider < 4.5.0 - Contributor+ Stored XSS
• CVE-2024-109031 PoCBroken Link Checker < 2.4.2 - Admin+ SSRF
• CVE-2024-109081 PoCOpen Redirect in lm-sys/fastchat
• CVE-2024-1091418 PoCsD-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection
• CVE-2024-109153 PoCsD-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection
• CVE-2024-109161 PoCD-Link DNS-320/DNS-320LW/DNS-325/DNS-340L HTTP GET Request info.xml information disclosure
• CVE-2024-109191 PoCdidi Super-Jacoco triggerUnitCover os command injection
• CVE-2024-109201 PoCmariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key
• CVE-2024-1092424 PoCsReally Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
• CVE-2024-109251 PoCAuthorization Bypass Through User-Controlled Key in GitLab
• CVE-2024-109261 PoCIBPhoenix ibWebAdmin Tabelas Section toggle_fold_panel.php cross site scripting
• CVE-2024-109271 PoCMonoCMS Account Information Page account.php cross site scripting
• CVE-2024-109281 PoCMonoCMS Posts Page opensaved.php cross site scripting
• CVE-2024-109301 PoCCarrier Block Load Privilege Escalation
• CVE-2024-109391 PoCImage Widget < 4.4.11 - Admin+ Stored XSS
• CVE-2024-109461 PoCGuangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System SysLib sql injection
• CVE-2024-109471 PoCGuangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System BatchOrder sql injection
• CVE-2024-109581 PoCWP Photo Album Plus <= 8.8.08.007 - Unauthenticated Arbitrary Shortcode Execution via getshortcodedrenderedfenodelay
• CVE-2024-109661 PoCTOTOLINK X18 cstecgi.cgi os command injection
• CVE-2024-109671 PoCcode-projects E-Health Care System delete_user_appointment_request.php sql injection
• CVE-2024-109681 PoC1000 Projects Bookstore Management System contact_process.php sql injection
• CVE-2024-109691 PoC1000 Projects Bookstore Management System Login login_process.php sql injection
• CVE-2024-109791 PoCPostgreSQL PL/Perl environment variable changes execute arbitrary code
• CVE-2024-109801 PoCElement Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS
• CVE-2024-109871 PoCcode-projects E-Health Care System user_appointment.php sql injection
• CVE-2024-109881 PoCcode-projects E-Health Care System doctor_login.php sql injection
• CVE-2024-109891 PoCcode-projects E-Health Care System detail.php sql injection
• CVE-2024-109901 PoCSourceCodester Online Veterinary Appointment System view_service.php sql injection
• CVE-2024-109911 PoCCodezips Hospital Appointment System editBranchResult.php sql injection
• CVE-2024-109931 PoCCodezips Online Institute Management System manage_website.php unrestricted upload
• CVE-2024-109941 PoCCodezips Online Institute Management System edit_user.php unrestricted upload
• CVE-2024-109951 PoCCodezips Hospital Appointment System removeDoctorResult.php sql injection
• CVE-2024-109961 PoC1000 Projects Bookstore Management System process_category_edit.php sql injection
• CVE-2024-109971 PoC1000 Projects Bookstore Management System book_list.php sql injection
• CVE-2024-109981 PoC1000 Projects Bookstore Management System process_category_add.php sql injection
• CVE-2024-109991 PoCCodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload