CVE-2026-78142

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archivedrecords.php of the component Restore/Delete. The manipulation of the argument residentid results in authorization bypass. The attack may be launched...

CVE-2026-43499-popsicle

CVE-2026-43499 for popsicle Este repositório contém a implementação de escalonamento de privilégio local no Android 16 para Xiaomi 17 Pro Max popsicle. Kernel verificado: root@kitploit: 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k Os modelos Xiaomi 17, Pro e Ultra que usam este kernel for...

CVE-2026-78142

CVE-2026-78142 affects code-projects Barangay Resident Profiling Management System 1.0 , an open-source PHP application. The vulnerability resides in the Restore/Delete component of the file /archived_records.php , where manipulation of the resident_id parameter leads to an authorization bypass ....

CVE-2026-78141

A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The flaw resides in the function formexeCommand within the file /goform/exeCommand , where unsanitized manipulation of the argument cmdinput allows an attacker to inject arbitrary commands. The attack is remotely ex...

CVE-2026-78140

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

CVE-2021-31630-HTB

Exploit CVE-2021-31630 Exploit PoC CVE-2021-31630 per OpenPLC sulla macchina WifineticTwo Hack The Box, Questo script funge da exploit Proof of Concept PoC per CVE-2021-31630, indirizzato al servizio OpenPLC in esecuzione sulla macchina WifineticTwo sulla piattaforma Hack The Box. Utilizzo...

EUVD-2026-64664

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

CVE-2026-78140

Dromara UJCMS up to 10.1.3 is affected by a Server-Side Template Injection (SSTI) vulnerability in the update function of WebFileTemplateController.java (web-file-template endpoint). The root cause is improper neutralization of special elements used in the FreeMarker template engine. The attack i...

CVE-2026-78140 Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...

exp_hub

0x01 Nota Questo progetto è destinato esclusivamente a test di penetrazione legittimi e a scopo di studio e riferimento per gli appassionati. Si prega di rispettare la Legge sulla sicurezza informatica della Repubblica Popolare Cinese e le leggi locali applicabili. È vietato utilizzare questo...

PS5-IPV6-Kernel-Exploit

PS5 3.xx / 4.xx Kernel Exploit Sommario Questa repository contiene un'implementazione sperimentale WebKit ROP di un exploit del kernel PS5 basata sulla Use-After-Free UAF IPV6 di TheFlow , che è stata segnalata su HackerOne. La strategia dell'exploit è in gran parte basata sulla PoC BSD/PS4 di...

chipicopwn

chipicopwn Exploit del bootloader per Google Nest Hub 2ª generazione elaine requisiti Google Nest Hub 2ª generazione Raspberry Pi Pico Hub USB alimentato o cavo USB a Y pico-sdk vedi la guida introduttiva per le istruzioni di installazione versioni supportate firmware di fabbrica 2020/12 - U-Boot...

cgi-bin-shellshock

Come usare Clona il repository oppure copia-incolla quello che preferisci root@kitploit: sudo git clone https://github.com/Gurguii/shellshock.sh Esegui lo script Bash root@kitploit: bash shellshock.sh -u -h -p Python root@kitploit: python3 shellshock.py -u -lh -lp Nota: la LPORT predefinita è 444...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 RCE autenticata Questo repository contiene un proof of concept per CVE-2021-43857 , una vulnerabilità di esecuzione di codice in remoto che affligge Gerapy -p -L -P Requisiti 1. Python 3.x 2. requests e pyfiglet pip install requests pyfiglet 3. Netcat nc...

selenium-node-takeover-kit

Exploit Metasploit Questo progetto è stato spostato. Per ottenere l'ultima versione, esegui il pull da https://codeberg.org/JonStratton/selenium-node-takeover-kit Questo combina alcuni degli esempi seguenti per caricare file su, scaricare file da, ed eseguire codice su un nodo Selenium tramite il...

CVE-2022-0543

CVE-2022-0543 Exploit completo per RCE su Redis tramite la vulnerabilità di fuga dalla sandbox Lua. Basato su https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/. Caratteristiche: Reverse shell automatica -I + -P Esecuzione di un singolo comando...

CVE-2026-78112

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

EUVD-2026-64647

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

CVE-2026-78112

A SQL injection vulnerability exists in itsourcecode Hospital Management System Project in PHP 1.0 , specifically in the file /viewservicetype.php through manipulation of the delid parameter. The flaw can be exploited remotely and requires low privileges (authenticated access). CVSS 3.1 scores it...