CVE-2024-12000 to CVE-2024-12999

255 CVEs with public proof-of-concept exploits.

• CVE-2024-120001 PoCcode-projects Blood Bank System Setting updatesettings.php cross site scripting
• CVE-2024-120011 PoCcode-projects Wazifa System Setting updatesettings.php cross site scripting
• CVE-2024-120021 PoCTenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference
• CVE-2024-120071 PoCcode-projects Farmacia visualizar-produto.php sql injection
• CVE-2024-120082 PoCsW3 Total Cache <= 2.8.1 Information Exposure via Log Files
• CVE-2024-120252 PoCsCollapsing Categories <= 3.0.8 - Unauthenticated SQL Injection
• CVE-2024-120293 PoCsRemote Code Execution via Model Deserialization in invoke-ai/invokeai
• CVE-2024-120844 PoCsRsync: heap buffer overflow in rsync due to improper checksum length handling
• CVE-2024-120852 PoCsRsync: info leak via uninitialized stack contents
• CVE-2024-120861 PoCRsync: rsync server leaks arbitrary client files
• CVE-2024-120871 PoCRsync: path traversal vulnerability in rsync
• CVE-2024-120931 PoCImproper Validation of Consistency within Input in GitLab
• CVE-2024-120961 PoCExhibit to WP Gallery <= 0.0.2 - Reflected XSS
• CVE-2024-121091 PoCProduct Labels For Woocommerce < 1.5.9 - Admin+ SQLi
• CVE-2024-121381 PoChorilla create_skills deserialization
• CVE-2024-121471 PoCNetgear R6900 HTTP Header upgrade_check.cgi buffer overflow
• CVE-2024-121571 PoCPopup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection
• CVE-2024-121631 PoCGoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Upload
• CVE-2024-121721 PoCWP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses <= 3.2.21 - Missing Authorization to…
• CVE-2024-121731 PoCMaster Slider < 3.10.5 - Editor+ Stored XSS
• CVE-2024-121801 PoCDedeCMS article_add.php cross site scripting
• CVE-2024-121811 PoCDedeCMS SWF File uploads_add.php cross site scripting
• CVE-2024-121821 PoCDedeCMS soft_add.php cross site scripting
• CVE-2024-121831 PoCDedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scripting
• CVE-2024-121851 PoCcode-projects Hotel Management System Administrator Login Password stack-based overflow
• CVE-2024-121861 PoCcode-projects Hotel Management System Available Room hotelnew.c stack-based overflow
• CVE-2024-121871 PoC1000 Projects Library Management System showbook.php sql injection
• CVE-2024-121881 PoC1000 Projects Library Management System stu.php sql injection
• CVE-2024-122093 PoCsWP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion
• CVE-2024-122271 PoCMSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference
• CVE-2024-122281 PoCPHPGurukul Complaint Management System user-search.php sql injection
• CVE-2024-122291 PoCPHPGurukul Complaint Management System complaint-search.php sql injection
• CVE-2024-122301 PoCPHPGurukul Complaint Management System subcategory.php sql injection
• CVE-2024-122311 PoCCodeZips Project Management System index.php sql injection
• CVE-2024-122321 PoCcode-projects Simple CRUD Functionality index.php cross site scripting
• CVE-2024-122331 PoCcode-projects Online Notice Board Profile Picture registration.php unrestricted upload
• CVE-2024-122341 PoC1000 Projects Beauty Parlour Management System edit-customer-detailed.php sql injection
• CVE-2024-122351 PoCShenzhen Dashi Tongzhou Information Technology AgileBPM AuthorizationTokenCheckFilter.java doFilter access control
• CVE-2024-122441 PoCMissing Authorization in GitLab
• CVE-2024-122522 PoCsSEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)
• CVE-2024-122701 PoCBeautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection
• CVE-2024-122731 PoCCalculated Fields Form < 5.2.62 - Admin+ Stored XSS
• CVE-2024-122741 PoCBookingPress < 1.1.23 - Unauthenticated Export File Download
• CVE-2024-122751 PoCCanvasFlow <= 1.5.5 - Reflected XSS
• CVE-2024-122801 PoCWP Customer Area <= 8.2.4 - Event Log Deletion via CSRF
• CVE-2024-122821 PoCWordPress连接微博 <= 2.5.6 - Stored XSS via CSRF
• CVE-2024-123011 PoCJSP Store Locator <= 1.0 - Deletion via Missing CSRF
• CVE-2024-123021 PoCIcegram Engage < 3.1.32 - Author+ Stored XSS
• CVE-2024-123031 PoCIncorrect Privilege Assignment in GitLab
• CVE-2024-123051 PoCObject-Level Access Control Vulnerability Allows Unauthorized Access to Student Grades in Unifiedtransform
• CVE-2024-123061 PoCAccess Control Vulnerabilities Allow Unauthorized Access to User Profiles in Unifiedtransform
• CVE-2024-123071 PoCFunction-Level Access Control Vulnerability Allows Unauthorized Modification of Student Data in Unifiedtransform
• CVE-2024-123081 PoCLogo Slider < 4.6.0 - Contributor+ Stored XSS
• CVE-2024-123111 PoCEmail Subscribers < 5.7.44 - Admin+ SQL Injection
• CVE-2024-123211 PoCWC Affiliate <= 2.3.9 - Reflected XSS
• CVE-2024-123351 PoCAvada Builder <= 3.11.12 - Authenticated (Contributor+) Protected Post Disclosure
• CVE-2024-123422 PoCsTP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service
• CVE-2024-123431 PoCTP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow
• CVE-2024-123442 PoCsTP-Link VN020 F3v(T) FTP USER Command memory corruption
• CVE-2024-123454 PoCsINW Krbyyyzo Daily Huddle Site gbo.aspx resource consumption
• CVE-2024-123471 PoCGuangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization
• CVE-2024-123481 PoCGuizhou Xiaoma Technology jpress Attachment Upload upload AttachmentUtils.isUnSafe cross site scripting
• CVE-2024-123491 PoCJFinalCMS save cross-site request forgery
• CVE-2024-123501 PoCJFinalCMS Template TemplateController.java update command injection
• CVE-2024-123521 PoCTOTOLINK EX1800T cstecgi.cgi sub_40662C stack-based overflow
• CVE-2024-123531 PoCSourceCodester Phone Contact Manager System User Menu MenuDisplayStart input validation
• CVE-2024-123541 PoCSourceCodester Phone Contact Manager System User Menu MenuDisplayStart buffer overflow
• CVE-2024-123551 PoCSourceCodester Phone Contact Manager System ContactBook.cpp adding input validation
• CVE-2024-123563 PoCsKEVCommand Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
• CVE-2024-123571 PoCSourceCodester Best House Rental Management System index.php file inclusion
• CVE-2024-123581 PoCWeiYe-Jing datax-web add os command injection
• CVE-2024-123591 PoCcode-projects Admin Dashboard vendor_management.php cross site scripting
• CVE-2024-123601 PoCcode-projects Online Class and Exam Scheduling System class_update.php sql injection
• CVE-2024-123792 PoCsAllocation of Resources Without Limits or Throttling in GitLab
• CVE-2024-123801 PoCGeneration of Error Message Containing Sensitive Information in GitLab
• CVE-2024-123812 PoCsType Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2024-124001 PoCTourmaster < 5.3.5 - Reflected XSS
• CVE-2024-124041 PoCCF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection
• CVE-2024-124311 PoCMissing Authorization in GitLab
• CVE-2024-124361 PoCWP Customer Area <= 8.2.4 - Bulk Delete via CSRF
• CVE-2024-124712 PoCsPost Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator <= 1.3.1 - Missing Authorization to…
• CVE-2024-124771 PoCAvada Builder <= 3.11.11 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets
• CVE-2024-124791 PoCcjbi wetech-cms TopicDao.java searchTopicByKeyword sql injection
• CVE-2024-124801 PoCcjbi wetech-cms TopicDao.java searchTopic sql injection
• CVE-2024-124811 PoCcjbi wetech-cms UserDao.java findUser sql injection
• CVE-2024-124821 PoCcjbi wetech-cms Database Backup BackupFileUtil.java backup path traversal
• CVE-2024-124832 PoCsDromara UJCMS User ID id authorization
• CVE-2024-124842 PoCsCodezips Technical Discussion Forum signuppost.php sql injection
• CVE-2024-124851 PoCcode-projects Online Class and Exam Scheduling System department.php sql injection
• CVE-2024-124861 PoCcode-projects Online Class and Exam Scheduling System rank_update.php sql injection
• CVE-2024-124871 PoCcode-projects Online Class and Exam Scheduling System room_update.php sql injection
• CVE-2024-124881 PoCcode-projects Online Class and Exam Scheduling System subject_update.php sql injection
• CVE-2024-124891 PoCcode-projects Online Class and Exam Scheduling System term.php sql injection
• CVE-2024-124901 PoCcode-projects Online Class and Exam Scheduling System teacher_save.php sql injection
• CVE-2024-124921 PoCcode-projects Farmacia visualizar-usuario.php sql injection
• CVE-2024-124971 PoC1000 Projects Attendance Tracking Management System check_admin_login.php sql injection
• CVE-2024-125031 PoCClassCMS Model Management Page admin cross site scripting
• CVE-2024-125351 PoCHost PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure
• CVE-2024-125422 PoCslinkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure
• CVE-2024-125582 PoCsWP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information…
• CVE-2024-125661 PoCEmail Subscribers < 5.7.45 - Admin+ Stored XSS
• CVE-2024-125671 PoCEmail Subscribers < 5.7.45 - Admin+ Stored XSS
• CVE-2024-125681 PoCEmail Subscribers < 5.7.45 - Admin+ Stored XSS
• CVE-2024-125701 PoCPrivilege Context Switching Error in GitLab
• CVE-2024-125812 PoCsKadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scripting
• CVE-2024-125831 PoCDynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side…
• CVE-2024-125852 PoCsPropertyHive < 2.1.1 - Reflected XSS
• CVE-2024-125861 PoCChalet Montagne Com Tools <= 2.7.8 - Reflected XSS
• CVE-2024-125871 PoCContact Form Master <= 1.0.7 - Reflected XSS
• CVE-2024-125941 PoCALL In One Custom Login Page <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation
• CVE-2024-125951 PoCAHAthat Plugin <= 1.6 - Reflected XSS via REQUEST_URI
• CVE-2024-126191 PoCInsufficient Granularity of Access Control in GitLab
• CVE-2024-126382 PoCsBulk Me Now <= 2.0 - Reflected XSS
• CVE-2024-126411 PoCChunghwa Telecom TenderDocTransfer - Reflected Cross-site Scripting to RCE
• CVE-2024-126531 PoCFabulaTech USB over Network IOCT ftusbbus2.sys 0x22040C null pointer dereference
• CVE-2024-126541 PoCFabulaTech USB over Network IOCT ftusbbus2.sys 0x220408 null pointer dereference
• CVE-2024-126551 PoCFabulaTech USB over Network IOCT ftusbbus2.sys 0x220420 null pointer dereference
• CVE-2024-126561 PoCFabulaTech USB over Network IOCT ftusbbus2.sys 0x220448 null pointer dereference
• CVE-2024-126571 PoCIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E000 null pointer dereference
• CVE-2024-126581 PoCIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E01C null pointer dereference
• CVE-2024-126591 PoCIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E004 null pointer dereference
• CVE-2024-126601 PoCIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E018 null pointer dereference
• CVE-2024-126611 PoCIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E024 null pointer dereference
• CVE-2024-126621 PoCIObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E040 null pointer dereference
• CVE-2024-126631 PoCfunnyzpc Mee-Admin Login login observable response discrepancy
• CVE-2024-126641 PoCruifang-tech Rebuild Project Task Comment cross site scripting
• CVE-2024-126651 PoCruifang-tech Rebuild Task Comment Attachment Upload cross site scripting
• CVE-2024-126661 PoCClassCMS User Management Page admin insufficient privileges
• CVE-2024-126791 PoCPrisna GWT < 1.4.14 - Admin+ Stored XSS
• CVE-2024-126801 PoCPrisna GWT < 1.4.14 - Admin+ Stored XSS
• CVE-2024-126821 PoCSmart Maintenance Mode < 1.5.2 - Admin+ Stored XSS
• CVE-2024-126831 PoCSmart Maintenance Mode < 1.5.2 - Admin+ Stored XSS
• CVE-2024-126921 PoCType Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2024-127081 PoCBulk Me Now <= 2.0 - Stored XSS via Shortcode
• CVE-2024-127091 PoCBulk Me Now <= 2.0 - Message Deletion via CSRF
• CVE-2024-127141 PoCBacklink Monitoring Manager <= 0.1.3 - Reflected XSS
• CVE-2024-127151 PoCAsgard Security Scanner <= 0.7 - Reflected XSS
• CVE-2024-127161 PoCSimple Basic Contact Form < 20250114 - Admin+ Stored XSS
• CVE-2024-127171 PoCaklamator-infeed <= 2.0.0 - Admin+ Stored XSS
• CVE-2024-127221 PoCTwitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via Shortcode
• CVE-2024-127231 PoCInfility Global <= 2.9.8 - Reflected XSS
• CVE-2024-127242 PoCsWP DeskLite <= 1.0.0 - Reflected XSS
• CVE-2024-127251 PoCClasify Classified Listing <= 1.0.7 - Reflected XSS
• CVE-2024-127261 PoCClipArt <= 0.2 - Reflected XSS
• CVE-2024-127311 PoCaklamator-infeed <= 2.0.0 - Reflected XSS
• CVE-2024-127322 PoCsAffiliateImporterEb <= 1.0.6 - Reflected XSS
• CVE-2024-127331 PoCAffiliateImporterEb <= 1.0.6 - Reflected XSS via Search
• CVE-2024-127342 PoCsAdvance Post Prefix <= 1.1.1 - Reflected XSS
• CVE-2024-127351 PoCAdvance Post Prefix <= 1.1.1 - Admin+ SQL Injection
• CVE-2024-127361 PoCBU Section Editing <= 0.9.9 - Reflected XSS
• CVE-2024-127372 PoCsWP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSS
• CVE-2024-127391 PoCMobile Contact Bar < 3.0.5 - Admin+ Stored XSS
• CVE-2024-127431 PoCMailPoet < 5.5.2 - Admin+ Stored XSS
• CVE-2024-127492 PoCsCompetition Form <= 2.0 - Reflected XSS
• CVE-2024-127501 PoCCompetition Form <= 2.0 - Competition Deletion via CSRF
• CVE-2024-127671 PoCBuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR
• CVE-2024-127681 PoCResponsive iframe <= 1.2.0 - Contributor+ Stored XSS
• CVE-2024-127691 PoCSimple Banner < 3.0.4 - Admin+ Stored XSS
• CVE-2024-127701 PoCWP ULike < 4.7.6 - Admin+ Stored XSS
• CVE-2024-127721 PoCNinja Tables < 5.0.17 - Admin+ Stored XSS
• CVE-2024-127731 PoCAltra Side Menu <= 2.0 - Admin+ SQL Injection
• CVE-2024-127741 PoCAltra Side Menu <= 2.0 - Abitrary Menu Deletion via CSRF
• CVE-2024-127831 PoCitsourcecode Vehicle Management System billaction.php cross site scripting
• CVE-2024-127841 PoCitsourcecode Vehicle Management System editbill.php sql injection
• CVE-2024-127851 PoCitsourcecode Vehicle Management System sendmail.php sql injection
• CVE-2024-127861 PoCX1a0He Adobe Downloader XPC Service com.x1a0he.macOS.Adobe-Downloader.helper shouldAcceptNewConnection privileges management
• CVE-2024-127871 PoC1000 Projects Attendance Tracking Management System check_student_login.php sql injection
• CVE-2024-127881 PoCCodezips Technical Discussion Forum signinpost.php sql injection
• CVE-2024-127891 PoCPbootCMS IndexController.php code injection
• CVE-2024-127901 PoCcode-projects Hostel Management Site room-details.php cross site scripting
• CVE-2024-127911 PoCCodezips E-Commerce Site signin.php sql injection
• CVE-2024-127921 PoCCodezips E-Commerce Site newadmin.php sql injection
• CVE-2024-127931 PoCPbootCMS IndexController.php path traversal
• CVE-2024-127941 PoCCodezips E-Commerce Site editorder.php sql injection
• CVE-2024-128001 PoCIP Based Login < 2.4.1 - Admin+ Stored XSS
• CVE-2024-128071 PoCSocial Share Buttons for WordPress <= 2.7 - Admin+ Stored XSS
• CVE-2024-128081 PoCWP ERP | Complete HR solution with recruitment < 1.13.4 - Admin+ Stored XSS
• CVE-2024-128121 PoCWP ERP < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information
• CVE-2024-128241 PoCNokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change
• CVE-2024-128281 PoCWebmin CGI Command Injection Remote Code Execution Vulnerability
• CVE-2024-128411 PoCEmlog Pro tag.php cross site scripting
• CVE-2024-128421 PoCEmlog Pro user.php cross site scripting
• CVE-2024-128431 PoCEmlog Pro plugin.php cross site scripting
• CVE-2024-128441 PoCEmlog Pro store.php cross site scripting
• CVE-2024-128451 PoCEmlog Pro common.php cross site scripting
• CVE-2024-128461 PoCEmlog Pro link.php cross site scripting
• CVE-2024-128473 PoCsNETGEAR DGN setup.cgi OS Command Injection
• CVE-2024-128493 PoCsError Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read
• CVE-2024-128563 PoCsFour-Faith Industrial Router adjust_sys_time OS Command Injection
• CVE-2024-128721 PoCZalomení <= 1.5 - Admin+ Stored XSS
• CVE-2024-128732 PoCsCustom Field Manager <= 1.0 - Reflected XSS Vulnerability
• CVE-2024-128741 PoCTop Comments <= 1.0 - Admin+ Stored Cross-Site Scripting
• CVE-2024-128772 PoCsGiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
• CVE-2024-128782 PoCsCustom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS
• CVE-2024-128831 PoCcode-projects Job Recruitment _email.php cross site scripting
• CVE-2024-128841 PoCCodezips E-Commerce Website login.php sql injection
• CVE-2024-128861 PoCOut-Of-Memory (OOM) Vulnerability in ollama/ollama
• CVE-2024-128901 PoCcode-projects Online Exam Mastering System update.php sql injection
• CVE-2024-128911 PoCcode-projects Online Exam Mastering System account.php sql injection
• CVE-2024-128921 PoCcode-projects Online Exam Mastering System sign.php cross site scripting
• CVE-2024-128931 PoCPortabilis i-Educar Tipo de Usuário Page 2 cross site scripting
• CVE-2024-128961 PoCIntelbras VIP S4320 G2 Web Interface webCapsConfig information disclosure
• CVE-2024-128971 PoCIntelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal
• CVE-2024-128981 PoC1000 Projects Attendance Tracking Management System faculty_action.php sql injection
• CVE-2024-128991 PoC1000 Projects Attendance Tracking Management System course_action.php sql injection
• CVE-2024-129001 PoCFoxCMS Configuration File installdb.php code injection
• CVE-2024-129011 PoCFoxCMS API Endpoint Site.php improper authorization
• CVE-2024-129052 PoCsAn Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path…
• CVE-2024-129081 PoCDelinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protocol handler…
• CVE-2024-129261 PoCCodezips Project Management System advanced.php sql injection
• CVE-2024-129271 PoC1000 Projects Attendance Tracking Management System check_faculty_login.php sql injection
• CVE-2024-129391 PoCcode-projects Job Recruitment _all_edits.php add_edu sql injection
• CVE-2024-129401 PoC1000 Projects Attendance Tracking Management System student_action.php sql injection
• CVE-2024-129411 PoCCodeAstro Blood Donor Management System deletedannounce.php sql injection
• CVE-2024-129421 PoC1000 Projects Portfolio Management System MCA admin_login.php sql injection
• CVE-2024-129431 PoCCodeAstro House Rental Management System ownersignup.php sql injection
• CVE-2024-129441 PoCCodeAstro House Rental Management System signin.php sql injection
• CVE-2024-129451 PoCcode-projects Simple Car Rental System account.php sql injection
• CVE-2024-129461 PoC1000 Projects Attendance Tracking Management System admin_action.php sql injection
• CVE-2024-129471 PoCCodezips Hospital Management System invo.php sql injection
• CVE-2024-129511 PoC1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload
• CVE-2024-129521 PoCmelMass comfy_mtb Dependency endpoint.py run_command code injection
• CVE-2024-129531 PoC1000 Projects Portfolio Management System MCA update_pd_process.php unrestricted upload
• CVE-2024-129541 PoC1000 Projects Portfolio Management System MCA update_ach.php unrestricted upload
• CVE-2024-129551 PoCPHPGurukul Blood Bank & Donor Management System logout.php cross-site request forgery
• CVE-2024-129561 PoC1000 Projects Portfolio Management System MCA add_achievement_details.php unrestricted upload
• CVE-2024-129581 PoC1000 Projects Portfolio Management System MCA update_pro_details.php sql injection
• CVE-2024-129591 PoC1000 Projects Portfolio Management System MCA update_personal_details.php sql injection
• CVE-2024-129601 PoC1000 Projects Portfolio Management System MCA update_edu_details.php sql injection
• CVE-2024-129611 PoC1000 Projects Portfolio Management System MCA update_ach_details.php sql injection
• CVE-2024-129621 PoCcode-projects Job Recruitment _all_edits.php sql injection
• CVE-2024-129631 PoCcode-projects Job Recruitment _all_edits.php add_xp sql injection
• CVE-2024-129641 PoC1000 Projects Daily College Class Work Report Book login.php sql injection
• CVE-2024-129651 PoC1000 Projects Portfolio Management System MCA update_ex_detail.php sql injection
• CVE-2024-129661 PoCcode-projects Job Recruitment _all_edits.php cn_update sql injection
• CVE-2024-129671 PoCcode-projects Job Recruitment _all_edits.php fln_update sql injection
• CVE-2024-129681 PoCcode-projects Job Recruitment _all_edits.php edit_jobpost sql injection
• CVE-2024-129691 PoCcode-projects Hospital Management System Login index.php sql injection
• CVE-2024-129701 PoCOS Command Injection in TUBITAK BILGEM's Pardus OS My Computer
• CVE-2024-129711 PoCQuickShell Authenticated Command Injection
• CVE-2024-129761 PoCCodeZips Hospital Management System staff.php sql injection
• CVE-2024-129771 PoCPHPGurukul Complaint Management System state.php sql injection
• CVE-2024-129781 PoCcode-projects Job Recruitment _all_edits.php add_req sql injection
• CVE-2024-129791 PoCcode-projects Job Recruitment _all_edits.php cn_update cross site scripting
• CVE-2024-129801 PoCcode-projects Job Recruitment _all_edits.php fln_update cross site scripting
• CVE-2024-129811 PoCCodeAstro Car Rental System bookingconfirm.php sql injection
• CVE-2024-129831 PoCcode-projects Hospital Management System Edit Doctor Details Page manage-doctors.php cross site scripting
• CVE-2024-129841 PoCAmcrest IP2M-841B Web Interface webCapsConfig information disclosure
• CVE-2024-129862 PoCsDrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection
• CVE-2024-129872 PoCsKEVDrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
• CVE-2024-129881 PoCNetgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow
• CVE-2024-129901 PoCruifang-tech Rebuild Admin Verification Page admin-verify redirect
• CVE-2024-129911 PoCBeijing Longda Jushang Technology DBShop商城系统 home-order cross site scripting
• CVE-2024-129941 PoCrunning-elephant Datart File Upload import extractModel deserialization
• CVE-2024-129951 PoCruifang-tech Rebuild Project Tasks Section tasks cross site scripting