CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Autorización faltante para usuarios autenticados Suscriptor+ que permite la actualización arbitraria de metadatos de usuario Descripción El plugin WP Courses LMS – Online...

CVE-2021-46073

CVE-2021-46073 Título del Exploit: Vehicle Service Management System - 'User List' Cross Site Scripting Almacenado XSS Autor del Exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIO Referencias: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-105253

The itsourcecode Online Admission System Project 1.0 is vulnerable to a SQL injection vulnerability in the /admin/login1.php file. The flaw is caused by improper processing of the User argument, which allows an unauthenticated remote attacker to execute arbitrary SQL commands. The exploit has bee...

EUVD-2026-92288

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

WebminRCE-exploit

WebminRCE-exploit CVE-2022-0824, CVE-2022-0829 - Exploit de privilegio de File Manager La aplicación vulnerable para probar este PoC se puede encontrar aquí como una imagen de docker. Requisitos previos: Python3 Módulo Requests Descripción Vulnerabilidad Control de Acceso Inadecuado que lleva a...

p4wned

P4WNED CVE-2026-6043 Herramientas de investigación de seguridad de Perforce Helix Core y plantillas de nuclei. Artículo de investigación: https://morganrobertson.net/p4wned/ Lea el artículo para obtener todos los detalles. Solo para objetivos autorizados. Úselo en sus propios servidores o con...

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 Vulnerabilidad de Inyección de Cabecera Host en SISQUALWFM Este repositorio contiene información relacionada con una vulnerabilidad de inyección de cabecera Host descubierta en SISQUALWFM versión 7.1.319.103, que permite a un atacante manipular enlaces de páginas web o redirigir a...

CVE-2026-105314

Papermerge 3.5.3 is vulnerable to remote code execution (RCE) due to a directory traversal flaw in the /api/documents/upload endpoint. A standard user can exploit this to write a Python .pth file into the site-packages directory. The malicious code within the .pth file is executed automatically d...

CVE-2026-7458

🧨 CVE-2026-7458 – Bypass de OTP en PickPlugins User Verification Omisión de autenticación sin autenticación previa mediante comparación débil en la API REST de verificación OTP PickPlugins User Verification ≤ 2.0.46 📖 Descripción El plugin User Verification de PickPlugins para WordPress versiones...

Exploit-CVE-2011-2523

README : Exploit para VSFTP 2.3.4 Este script de Python está diseñado para explotar una vulnerabilidad de puerta trasera presente en VSFTP versión 2.3.4. El exploit otorga acceso no autorizado al sistema que ejecuta esta versión específica de VSFTP. Uso Para usar este script de exploit, sigue est...

CVE-2026-105302

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC Este repositorio contiene una prueba de concepto benigna para CVE-2026-36227, un problema de path traversal en el manejo del registro de usuarios de Easy Chat Server 3.1. Este repositorio es únicamente para investigación de segurida...

CVE-2025-27893

CVE-2025-27893: Control Externo de Parámetro Web Asumido como Inmutable en Archer Platform Descripción En Archer Platform 6 hasta 6.14.00202.10024, un usuario autenticado con privilegios de creación de registros puede manipular campos inmutables, como la fecha de creación, interceptando y...

EUVD-2026-92257

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302

A flaw in the User Session Note mapper of the Keycloak identity and access management solution allows for the exposure of sensitive internal credentials. The mapper fails to validate if a requested session note contains federated access tokens from external identity providers. Consequently, a del...

CVE-2026-105302

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...