G Auto-Hyperlink <= 1.0.1 - SQL Injection

The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in a SQL statement, to select data to be displayed in the admin dashboard, leading to an authenticated SQL injection id: CVE-2021-24627 info: name: G Auto-Hyperlink = 1.0.1 - SQL...

CVE-2024-40457-PoC

CVE-2024-40457-PoC CVE PoC 2024-40457 Fai attenzione ai flag -g, controlla l'immagine...

vaas

Verdict-as-a-Service Verdict-as-a-Service VaaS è un servizio cloud che offre la possibilità di scansionare file per rilevare malware e altre minacce. Permette di integrare facilmente il rilevamento di malware nella tua applicazione con poche righe di codice. Puoi utilizzare VaaS per proteggere...

CVE-2025-68001

CVE-2025-68001 Il plugin WordPress g-FFL Checkout 📡 Resta un passo avanti. Unisciti a @KNxploited su Telegram — la tua fonte esclusiva per le ultime CVE, zero-day e ricerca exploit all'avanguardia. Aggiornato costantemente. Non per tutti. 📋 Panoramica CVE-2025-68001 è una vulnerabilità critica di...

CVE-2025-12720

g-FFL Cockpit 'POST', 36: 'callback' = CLASS, 'handleenqueueonly', 37: 'permissioncallback' = fn = self::fflcockpitisallowedself::$fflckey, 38: ; La funzione fflcockpitisallowed utiliz...

CVE-2026-56111

CVE-2026-56111 - Marlin M421 Out-of-bounds Write Proof of Concept für CVE-2026-56111 , ein Out-of-bounds Write im M421 G-Code-Handler von Marlin Firmware bei Build mit MESHBEDLEVELING. Sicherheitshinweis:...

CVE-2025-12721

g-FFL Cockpit 'returntrue', rendendolo completamente accessibile a qualsiasi visitatore non autenticato. Situato in class-sync-endpoint.php: 88: registerrestroute'fflcockpit/v1', '/serverstatus', 89: 'methods' = 'GET', 90: 'callback' = CLASS, 'handleserverstatus', 91: 'permissioncallback' =...

Logitech-G-Cloud-GhostLock-CVE-2026-43499

Logitech G Cloud · Tentativo di root CVE-2026-43499 GhostLock Logitech G Cloud — CVE-2026-43499 GhostLock Tentativo di root ⚠️ Solo per scopi di ricerca e difesa Tutti i contenuti di questo repository sono generati da DeepSeek AI , solo per ricerca sulla sicurezza, analisi delle vulnerabilità e...

@cotecna/stencil-components (>=3.0.0, <=3.2.1), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=6.0.0-nightly-20240307T150431.0, <=6.1.2)

@capacitor/ios NPM version =6.0.0-nightly-20240307T150431.0, =3.0.0, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

Astra Linux – Vulnerability in ntfs-3g

An invalid return code in fusekernmount allows for intercepting the libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

Exploit for CVE-2026-103956

abraxaslabs.tech · github.com/abraxas ·&...

PT-2026-104346

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument g name results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

CVE-2026-97520

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...

CVE-2026-87168

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87167

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

EUVD-2026-79823

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

EUVD-2026-79822

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...