Exploits & CVE's

Authored by Alaeddin Berksoy Online Food Ordering System version 2.0 suffers from a cross site scripting vulnerability. Change Mirror Download # Exploit Title: Online Food Ordering System v2 - Stored Cross Site...

Authored by Jann Horn, Google Security Research khugepaged on Linux races with rmap-based zap, races with GUP-fast, and fails to call MMU notifiers.

Authored by Ramuel Gall | Site wordfence.com WordPress Royal Elementor add-ons versions 1.3.59 and below suffer from cross site request forgery, insufficient access control, cross site scripting vulnerabilities. advisories | CVE-2022-4700,...

Authored by indoushka WordPress Mega Main Menu plugin version 2.2.2 suffers from a backup disclosure vulnerability. Change Mirror Download ====================================================================================================================================| # Title : WordPress Menu Plugin - Mega...

Authored by Jann Horn, Google Security Research The Mali driver tries to use the KBASE_REG_NO_USER_FREE flag to ensure that the memory region referenced by kbase_csf_tiler_heap::buf_desc_reg cannot be freed by userspace....

Authored by Jann Horn, Google Security Research Linux kernel version 4.10 suffers from a use-after-free vulnerability in __do_semtimedop() due to a lockless check outside the RCU section.

Authored by Thurein Soe MOV.AI Robotics Engine version 2.2.3-3 suffers from multiple cross site scripting vulnerabilities. advisories | CVE-2022-46620 Change Mirror Download Vendor Name: MOV.AIProduct Name: MOV.AI Robotics EngineVendor Home Page: https://www.mov.aiAffected...

Authored by EgiX | Site karmainsecurity.com Tiki Wiki CMS Groupware versions 25.0 and below suffer from multiple cross site request forgery vulnerabilities. advisories | CVE-2023-22852 Change Mirror Download ------------------------------------------------------------------------------Tiki Wiki CMS Groupware <=...

Authored by EgiX | Site karmainsecurity.com Tiki Wiki CMS Groupware versions 24.0 and below suffer from a PHP code injection vulnerability in structlib.php. advisories | CVE-2023-22853 Change Mirror Download --------------------------------------------------------------------------------Tiki Wiki CMS Groupware...

Authored by EgiX | Site karmainsecurity.com Tiki Wiki CMS Groupware versions 24.0 and below suffers from a PHP object injection vulnerability in grid.php. advisories | CVE-2023-22580 Change Mirror Download -----------------------------------------------------------------------------Tiki Wiki CMS Groupware...