PT-2026-106712

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql error of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The atta...

PT-2026-106719

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql query of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password resul...

CVE-2025-47227

CVE-2025-47227 CVE-2025-47227 익스플로잇 - ScriptCase 비밀번호 재설정 사전 인증 CVE-2025-47227 은 ScriptCase Production Environment ≤ 9.12.006의 사전 인증pre-auth 인증 우회 취약점입니다 CVSS 9.8. login.php 엔드포인트는 토큰, 이메일 검증, 또는 인증 없이 관리자 비밀번호를 재설정할 수 있게 해주며, 4글자 CAPTCHA풀기 쉬움와 nmaction=changepass를 포함한 POST만 필요합니다...

CVE-2022-45599

CVE-2022-45599 CVE URL:| https://vulners.com/cve/CVE-2022-45599 ---|--- 보고자:| TanYeeTat 제품:| Aztech WMB250AC Wireless Mesh Routers 영향을 받는 펌웨어:| 2020 릴리스 topaz-linux.lzma.img 펌웨어 다운로드:| 폐쇄 소스 제품 매뉴얼: https://kylaconnect.com/download-center/ 취약점은 2022년 6월 7일 에 [email protected]을 통해 Aztech의 보안 ...

CVE-2026-30252

ZenShare Suite - 脆弱性開示 このリポジトリには、ZenShare Suite アプリケーションで発見された複数の Reflected Cross-Site Scripting XSS 脆弱性に関する詳細が含まれています。 脆弱性の概要 ZenShare Suite アプリケーションは、ログイン機能とパスワード回復機能に影響を及ぼす Reflected Cross-Site Scripting XSS に対して脆弱です。攻撃者は、悪意のある URL を作成し、被害者を騙してその URL にアクセスさせることで、被害者のブラウザ上で任意の JavaScript...

CVE-2026-105233

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

CVE-2026-105233 kishor-23 food-waste-management-system Login Flow login.php session fixiation

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

CVE-2026-105233

A session fixation vulnerability exists in the Login Flow component of the kishor-23 food-waste-management-system (specifically within the login.php file). The root cause involves the manipulation of the PHPSESSID argument, which allows for remote exploitation. While the exploit has been disclose...

CVE-2026-105233 kishor-23 food-waste-management-system Login Flow login.php session fixiation

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

EUVD-2026-92256

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

CVE-2026-105233 kishor-23 food-waste-management-system Login Flow login.php session fixiation

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

PT-2026-104724

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

CVE-2026-105233: Session Fixation

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

xss2shell-check

xss2shell-check WordPress の wp-login.php における CVE-2026-64638（"XSS2Shell"） 反射プリミティブを検出する、非破壊・依存関係ゼロの検出ツールです。 背景 CVE-2026-64638 は、WordPress コアにおける認証前の反射型 XSS です。 2026-08-07 に PWN.AI によって公開され（CVSS 8.9、CWE-79）、7.0.3 で修正され、 全サポート対象ブランチ（6.9.6、6.8.7、6.7.6、6.6.6、6.5.9、…）にバックポートされています。 根本原因は、PHP の stripta...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress 事前認証反映型XSS → リモートコード実行チェーン DOM Clobbering + アプリケーションパスワード窃取 + REST API プラグイン有効化 = 完全なRCE ⚡ 概要 CVE-2026-64638 は、WordPress の wp-login.php における重大な事前認証型反映XSS です。この脆弱性は、ログインエラーメッセージが送信されたユーザー名を適切なHTMLエンコードなしで 反映するために存在し、 によるDOM Clobberingを可能にして、ほとんどのフィルタを回避します。...

CVE-2026-64638-PoC-XSS2Shell-

XSS2Shell — WordPress Pre-Auth XSS → RCE Chain PoC CVE-2026-64638 · Reflected XSS on wp-login.php · CVSS 8.9 v4.0 · Patched in WordPress 7.0.3 ⚠️ AUTHORIZED TESTING ONLY. This tool is for security research and authorized penetration testing against systems you own or have explicit written...

CVE-2026-64638-XSS-to-Shell-PoC

CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concept PoC tool for validating CVE-2026-64638 , a pre-authentication reflected Cross-Site Scripting XSS vulnerability affecting WordPress installations versions 6.4 – 7.0.2. Overview This tool automates the process of fingerprinting,...

CVE-2026-64638

CVE-2026-64638 CVE-2026-64638 クイックテスト import requests target = "http://127.0.0.1:9000/wp-login.php" payload = 'X' response = requests.posttarget, data="log": payload, "pwd": "x", timeout=5 printresponse.statuscode printresponse.text または POST /wp-login.php HTTP/1.1 Host: 127.0.0.1:9000 Content-Typ...

CVE-2026-64638

CVE-2026-64638 — XSS2Shell:WordPress ログインページの事前認証 XSS → サーバー RCE HackSpeak 配布ミラー。このリポジトリは WordSec が公開した XSS2Shell 教育用 PoCCVE-2026-64638の配布ミラーであり 、コードはアップストリームと同一です。アップストリームは MIT License、Copyright c 2026 WordSec 。 ⚠️ セキュリティ研究および認可されたテストのみを目的としています 。自分が所有しているか、書面による承認を得て評価を行う WordPress...

POC-WP-XSS2Shell-CVE-2026-64638

XSS2Shell — CVE-2026-64638 の PoC XSS2Shell CVE-2026-64638 チェーンの教育用 PoC です。 pwn.ai が独自に発見し、2026年8月7日に公開した、WordPress Core の 認証前 XSS → RCE の脆弱性です。 目次 1. エグゼクティブサマリー 2. 法的免責事項 3. チェーンアーキテクチャ 4. 要件 5. リポジトリ構成 6. クイックスタートガイド 7. エクスプロイトの検証 8. 追加ドキュメント エグゼクティブサマリー CVE-2026-64638 は、WordPress のログイン画面...