106546 matches found
[SECURITY] [DSA 6539-1] php-mongodb security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6539-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2026 https://www.debian.org/security/faq -...
advisory
セキュリティアドバイザリ — bl4dsc4n オープンソースソフトウェアにおいて独自に発見された脆弱性に関するセキュリティアドバイザリ、技術分析、および概念実証PoCを収録した公開リポジトリです。 すべての脆弱性は、管理されたラボ環境における手動ソースコードレビュー、セキュアコード分析、および動的アプリケーションセキュリティテストを通じて特定されました。本研究は責任ある開示慣行に従い、技術的詳細は開示またはCVE割り当て後に公開されます。 研究者 項目| 値 ---|--- 研究者| Carlos Tuma bl4dsc4n 所属| RedScan Academy コミュニティ|...
CVE-2026-104638
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
CVE-2026-104637
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
CVE-2026-104638 onetwothreeneth HospitalManagementSystem sessions.php improper authentication
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
EUVD-2026-91666
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
CVE-2026-104638
A security vulnerability exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d) within an unknown function in the php/sessions.php file. The root cause is the manipulation of the ID argument , which leads to improper authentication . This fl...
CVE-2026-104638 onetwothreeneth HospitalManagementSystem sessions.php improper authentication
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...
CVE-2026-104637 onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
EUVD-2026-91661
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
CVE-2026-104637
A weakness exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d ) within the php/controller.php file. Specifically, several functions—including add_patient , add_physician , add_account , update_account , update_subaccount , edit_physician ...
CVE-2026-104637 onetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
CVE-2026-66837
A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS...
CVE-2026-94638
A flaw was found in the Apache Thrift PHP bindings. Due to a lack of limits or throttling on resource allocation, a remote attacker can send crafted requests that consume excessive system resources. This issue can lead to a Denial of Service DoS for the affected service...
CVE-2019-9194-elFinder-Command-Injection-PoC
CVE-2019-9194 — elFinder 명령 삽입 PoC elFinder = 2.1.47의 PHP 커넥터 구성 요소를 통한 명령 삽입 취약점입니다. 인증되지 않은 원격 코드 실행을 웹 서버 사용자 권한으로 허용합니다. 작동 방식 유효한 JPEG 파일에 셸 명령이 포함된 악성 파일명을 업로드합니다. 이미지 회전을 요청하여 취약점을 트리거합니다. 이 과정에서 파일명이 정제 없이 exiftran에 전달됩니다. 삽입된 명령이 PHP 웹쉘SecSignal.php을 서버에 작성합니다. 웹쉘에 연결하여 대화형 셸에 진입합니다. 요구 ...
CVE-2026-104614
A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...
CVE-2026-104613
A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...
CVE-2026-104614
A SQL injection vulnerability exists in CodeAstro Simple Pharmacy Management System 1.0 . The flaw is located in the /SimplePharmacy-PHP/product/delete.php file, where improper processing of the ID argument allows for remote exploitation. An exploit is currently publicly available and may be used...
