mirth-connect-security-poc

NextGen Connect 4.5.2 vulnerability PoCs Working proof-of-concept exploits for three network-reachable vulnerabilities in NextGen Connect Mirth Connect 4.5.2. The harnesses run the official container image, create only the channel configuration needed by the finding, execute the attack from a...

CVE-2026-53629

The asset management software GLPI is vulnerable to a blind SQL injection in the history log filter (referred to as LogBleed ) affecting versions from 9.4.0 until 10.0.26 and 11.0.8 . The root cause is located in the Log::convertFiltersValuesToSqlCriteria() function, which fails to properly handl...

EUVD-2026-87289

GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This permits SQL injection through the history tab endpoint. Thi...

CVE-2026-53629 GLPI: SQL injection in history tab

GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the history tab that injects attacker-controlled values into a database query. This permits SQL injection through the history tab endpoint. Thi...

CVE-2025-5781

Exploit de FreePBX CVE-2025-57819 Descripción Este script explota una vulnerabilidad en versiones de FreePBX anteriores a 16.0.26.0 CVE-2025-57819, permitiendo a atacantes remotos ejecutar código PHP arbitrario a través de una falla de inyección SQL en el endpoint de la API AJAX. El exploit crea...

CVE-2026-97884

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality. The manipulation of the argument eno results in sql injection. The...

CVE-2026-97886

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be...

CVE-2026-97885

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.php. This manipulation of the argument fid causes sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2026-97883

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file updatequery.php. The manipulation of the argument gid leads to sql injection. The attack can be initiated remotely. Th...

CVE-2026-97882

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function of the file loginlinkfaculty.php of the component Faculty Authentication. Executing a manipulation of the argument fid/pass can lea...

CVE-2023-48084-Revised

CVE-2023-48084 — PoC actualizado Repositorio: MettHK/CVE-2023-48084-Revised Versión actualizada de Hamibubu/CVE-2023-48084 con multihilo, extracción mediante búsqueda binaria y opciones de línea de comandos para seleccionar base de datos / tabla / columna. No es el repositorio original. Este es u...

CVE-2024-36058

CVE-2024-36058 — Koha Library Software CVE ID: CVE-2024-36058 Product: Koha Library Software Vulnerability Type: Time-Based Blind SQL Injection CWE-89 CVSS Score: 8.1 High Authenticated Affected Versions: Below 22.05.22 Credits: Karolis Narvilas Description Koha is an open-source integrated libra...

CVE-2026-97886 mathurvishal CloudClassroom-PHP-Project managevideos2.php sql injection

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be...

CVE-2026-97886

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw resides in an unknown functionality of the managevideos2.php file, where manipulation of the editassid argument allows for remote exploitation. Whi...

EUVD-2026-87252

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file managevideos2.php. Such manipulation of the argument editassid leads to sql injection. The attack may be...

WP2Shell

WP2Shell - Exploit de RCE Pre-Auth de WordPress CVE-2026-63030 + CVE-2026-60137 Versión: 4.0.0 Autor: G0D150NE 📌 Descripción general WP2Shell es una herramienta de explotación de cadena completa para la ejecución remota de código pre-autenticación en WordPress. Combina dos vulnerabilidades...

CVE-2026-97885

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw resides in an unknown function within the updatefaculty.php file, where improper handling of the fid argument allows for remote exploitation. Becau...

EUVD-2026-87247

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updatefaculty.php. This manipulation of the argument fid causes sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2026-97884

A SQL injection vulnerability exists in the Student Update Functionality component of the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be ). The flaw is located within an unknown function of the updatestudent.php file, where the manipulation of the e...

EUVD-2026-87246

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatestudent.php of the component Student Update Functionality. The manipulation of the argument eno results in sql injection. The...