Exploit for CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729...

CVE-2026-82424 PHPGurukul Student Information System student_edit1.php sql injection

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-82424 PHPGurukul Student Information System student_edit1.php sql injection

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-82422

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

CVE-2026-82422 itsourcecode Sales and Inventory System emp_del.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

CVE-2026-82422

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

EUVD-2026-68137

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

cloudrasp-log4j2

CloudArmor · ランタイムアプリケーション自己防御モジュール - Log4j2 バージョン 简体中文 このプロジェクトは、Log4j2 CVE-2021-44228 を防御するために特別に構築された CloudArmor のローカルバージョンです。このプロジェクトを実行するためにネットワーク接続は必要ありません。 本番環境にデプロイする前に必ずテストを行ってください。...

CVE-2022-22639

詳細 ブログ参照： https://www.trendmicro.com/enus/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html CVE-2022-22639 の悪用 1. 次のコマンドでコンパイル： clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime...

iovyroot

iovyroot CVE-2015-1805脆弱性に基づくルートツール 32ビットと64ビットをサポートしますが、絶対カーネルアドレスが必要です（offsets.cを参照） pocはidler1984によって作成されました https://github.com/idl3r/testcode...

CVE-2021-40373

CVE-playsms 在 playsms 1.4.3 中存在一个漏洞，可能允许潜在攻击者执行远程代码。 如何复现 RCE（shell）： https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms 使用 admin:admin 登录 http://127.0.0.1/index.php?app=main&inc=coremainconfig&op=mainconfigtabs-information-page 在攻击者机器上托管恶意 bash 文件 使用 wg...

CVE-2021-3281

CVE-2021-3281 django.utils.archive.pyのlineno:171、Class TarArchiveにディレクトリトラバーサルの脆弱性があります。 関数呼び出しos.path.jointopath, nameはパラメータ"name"をチェックしていません。もし誰かがWindowsプラットフォームでこのユーティリティを使用すると、ディレクトリトラバーサルのリスクがあります。POCは以下です： root@kitploit: from django.utils import archive archive.extract'test.tar','.'...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 익스플로잇 도구, 이 도구를 사용하여 FortiGate SSL-VPN의 취약점을 확인할 수 있습니다. 이 취약점은 다음 버전에 영향을 미칩니다: • FortiOS 6.0 - 6.0.0 6.0.4 • FortiOS 5.6 - 5.6.3 5.6.7 • FortiOS 5.4 - 5.4.6 5.4.12 https://www.fortinet.com/blog/business-and-technology/fortios-ssl-vulnerability 주요 업데이트 0.7...

Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF 移动安全框架（MobSF）是一个针对 Android、iOS 和 Windows Mobile 移动应用的安全研究平台。MobSF 可用于多种场景，如移动应用安全、渗透测试、恶意软件分析和隐私分析。静态分析器支持常见的移动应用二进制文件，如 APK、IPA、APPX 和源代码。同时，动态分析器支持 Android 和 iOS 应用，并提供了一个交互式检测测试、运行时数据和网络流量分析的平台。MobSF 通过 REST API 和 CLI 工具与您的 DevSecOps 或 CI/CD 流水线无缝集成，轻松增强您的安全工作流程...

CVE-2023-34362

CVE-2023-34362 CVE-2023-34362およびMOVEit Transferに影響するPOC 技術的分析 脆弱性の技術的根本原因分析は、弊社ブログに掲載されています: https://www.horizon3.ai/moveit-transfer-cve-2023-34362-deep-dive-and-indicators-of-compromise/ 概要 このPOCは、SQLインジェクションを悪用してsysadmin APIアクセストークンを取得し、そのアクセスを使用してデシリアライゼーション呼び出しを悪用し、リモートコード実行を達成します。...

CVE

CVE STAR Labs 团队为各种 CVE 编写的概念验证漏洞利用脚本集合，这些 CVE 由他们发现或由他人发现。 CVE-2026-53264 目标：Linux 内核 版本：CentOS 9 内核版本 5.14.0-721 漏洞利用编写者：Lee Jia Jie CVE-2025-29824 目标：Windows 通用日志文件系统驱动程序 版本：Windows 11 23H2 漏洞利用编写者：Ong How Chong CVE-2024-26230 目标：Windows 电话服务器 版本：Windows 11 23H2 漏洞利用编写者：Đào Tuấn Linh...

gpg_reaper

GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...

gpg_reaper

GPG Reaper TL;DR: gpg-agent 캐시/메모리에서 GPG 개인 키 얻기/도용/복원 이 POC는 Windows에서 gpg-agent 메모리로부터 GPG 개인 키를 얻는 방법을 보여줍니다. 일반적으로 이는 10분 이내--default-cache-ttl 값에만 가능해야 합니다. 불행히도 housekeeping 함수캐시 정리를 담당는 GPG를 사용하는 경우에만 실행됩니다타이머가 없음. 따라서 일반적인 GPG 사용 사례예: 파일에 서명한 다음 GUI를 닫고 다른 작업 수행에서도 비밀번호는 여전히 gpg-agent 메모리...