109861 matches found
CVE-2026-37068
CVE-2026-37068 Veno File Manager Project 4.4.9의 /vfm-admin/index.php?section=translations&action=update에서 발생하는 임의 파일 쓰기 취약점으로, 슈퍼 관리자 역할을 가진 인증된 사용자가 영향을 받는 엔드포인트에 특수하게 조작된 POST 요청을 통해 애플리케이션 내의 모든 php 파일을 덮어쓸 수 있습니다...
CVE-2026-49085
CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Эксплойт...
CVE-2018-1000533
GitList 0.6.0 원격 코드 실행 취약점 CVE-2018-1000533 GitList는 현대적인 Git 저장소 뷰어이다. GitList 0.6.0 이하 버전에서는 시스템 함수에 부적절하게 검증된 입력값을 전달하는 취약점이 존재하여, PHP 사용자 권한으로 임의의 명령어를 실행할 수 있다. 환경 구성 GitList 서버 0.6.0을 시작하기 위해 다음 명령을 실행한다. docker compose up -d poc.py 실행 전 의존성을 설치한다. pip install requests 환경 구성이 완료되면...
CVE-2019-11043
CVE-2019-11043 0th3rs Security Team ====================== В версиях PHP 7.1.x ниже 7.1.33, 7.2.x ниже 7.2.24 и 7.3.x ниже 7.3.11 Протестировано на PHP 7.2.20/7.3.10 Инструкции 1. Относительно стабильно, достаточно подобрать длину query и длину поля заголовка Header. 2. autosession проверяет...
[SECURITY] [DSA 6539-1] php-mongodb security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6539-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2026 https://www.debian.org/security/faq -...
CVE-2026-104638
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
CVE-2026-104637
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
CVE-2026-104638 onetwothreeneth HospitalManagementSystem sessions.php improper authentication
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
EUVD-2026-91666
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
CVE-2026-104638
A security vulnerability exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d) within an unknown function in the php/sessions.php file. The root cause is the manipulation of the ID argument , which leads to improper authentication . This fl...
CVE-2026-104638 onetwothreeneth HospitalManagementSystem sessions.php improper authentication
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
CVE-2026-104638 onetwothreeneth HospitalManagementSystem sessions.php improper authentication
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
CVE-2026-104637 onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
CVE-2026-104637 onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
EUVD-2026-91661
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
CVE-2026-104637
A weakness exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d ) within the php/controller.php file. Specifically, several functions—including add_patient , add_physician , add_account , update_account , update_subaccount , edit_physician ...
CVE-2026-104637 onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
CVE-2026-66837
A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS. Mitigation Mitigation...
CVE-2026-94638
A flaw was found in the Apache Thrift PHP bindings. Due to a lack of limits or throttling on resource allocation, a remote attacker can send crafted requests that consume excessive system resources. This issue can lead to a Denial of Service DoS for the affected service...
CVE-2019-9194-elFinder-Command-Injection-PoC
CVE-2019-9194 — Внедрение команд в elFinder PoC Уязвимость внедрения команд в elFinder = 2.1.47 через PHP-компонент коннектора. Позволяет неавторизованному удалённому выполнению кода от имени пользователя веб-сервера. Как это работает Загружает корректный JPEG с вредоносным именем файла, содержащ...