Argus

Argus セキュリティインテリジェンスフレームワーク Argusは、プロフェッショナルなペネトレーションテスト...

CVE-2026-104613

The CodeAstro Simple Pharmacy Management System 1.0 is vulnerable to an SQL injection vulnerability within the /SimplePharmacy-PHP/product/view.php file. The root cause is the improper manipulation of the ID argument , which allows for remote execution of the attack. The exploit has been publicly...

EUVD-2026-91626

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

CVE-2026-104612 SourceCodester Student Result Management System Announcement new_announcement.php cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

CVE-2026-104612 SourceCodester Student Result Management System Announcement new_announcement.php cross site scripting

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

web-mitm-lab

WebMITM Lab - 보안 연구 프레임워크 Python 3.x | 교육 라이선스 | 라이선스 보기 ⚠️ 교육 목적 및 승인된 보안 연구 전용 📌 설명 WebMITM Lab은 통제된 환경에서 사이버 보안 훈련 및 연구를 위한 중간자 공격MITM 개념을 시연하도록 설계된 교육용 프레임워크입니다. 목적 이 툴킷은 보안 전문가, 학생 및 연구자가 다음을 이해하는 데 도움을 줍니다: 트래픽 가로채기 기술 HTTP/HTTPS 흐름 분석 안전하지 않은 구성 식별 방어적 보안 조치 🎓 교육 사용 사례 적합 대상: ✅ 대학 사이버 보안 강좌...

CVE-2026-104609

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the file editaccounts.php. This manipulation of the argument userid/patientid/physicianid/discountsid/servicesid causes sql injection. Remote...

CVE-2026-104611 Tenda AC9 POST Request fast_setting_internet_set stack-based overflow

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

EUVD-2026-91579

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

2025-Oracle-SSO-LDAP-Attack-Post-Incident-Written-Report

2025-Oracle-SSO-LDAP-Attack-Post-Incident-Written-Report 本インシデント後レポートは、Oracle Cloudのアイデンティティおよび認証インフラストラクチャを標的とした2025年のサプライチェーン侵害を調査したものです。脅威アクターが、レガシーなOracle Access Manager（OAM）インスタンスにおける未パッチの事前認証リモートコード実行脆弱性（CVE-2021-35587、CVSS...

CVE-2026-104609 onetwothreeneth HospitalManagementSystem edit_accounts.php get sql injection

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the file editaccounts.php. This manipulation of the argument userid/patientid/physicianid/discountsid/servicesid causes sql injection. Remote...

CVE-2026-104609 onetwothreeneth HospitalManagementSystem edit_accounts.php get sql injection

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the file editaccounts.php. This manipulation of the argument userid/patientid/physicianid/discountsid/servicesid causes sql injection. Remote...

CVE-2026-104442 YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104441 YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the valeur action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.p...

EUVD-2026-91438

Zebra before 6.1.0 contains an incomplete cleanup vulnerability in the state write task that allows remote unauthenticated peers to stall node synchronization by poisoning parenterrormap. Attackers can deliver a coinbase-malleated block sharing a canonical block's hash before it propagates, causi...

CVE-2026-104419

The Zebra (zebrad) software, versions 4.5.0 before 6.3.0 , is vulnerable to a logic flaw in how it handles FindBlocks responses. The software fails to track which peer provided specific block hashes, leading it to assign 100 misbehavior points (the ban threshold) to any peer that serves a block m...

CVE-2026-97876

A flaw was found in GRUB2. The bootloader insufficiently validates memory addresses passed to the serial configuration command, allowing arbitrary system memory to be targeted instead of a legitimate serial communication device. A local attacker with control over GRUB's boot configuration can...

DEBIAN-CVE-2026-97876

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

CVE-2026-97876

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

CVE-2026-104606

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...