CVE-2024-39722

Ferramenta de Exploração CVE-2024-39722 para Ollama Esta ferramenta foi projetada para explorar a CVE-2024-39722, uma vulnerabilidade de divulgação de existência de modelos no Ollama até a versão 0.1.45 inclusive. Ela permite que os utilizadores verifiquem se um servidor Ollama é vulnerável e...

SmartAsset-CORS-CVE-2020-26527

SmartAsset-CORS-CVE-2020-26527 CVE-2020-26527 Smart Asset - संस्करण 2020.7 Damstra Smart Asset 2020.7 के API/api/Version में एक समस्या पाई गई थी। क्रॉस-ऑरिजिन रिसोर्स शेयरिंग CORS मनमाने ऑरिजिन पर भरोसा करता है, जो 'Origin: example.com' हेडर को स्वीकार करता है और 200 OK और वाइल्डकार्ड...

CVE-2026-107103

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...

CVE-2026-107102

This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an...

CVE-2022-2414

CVE-2022-2414 CVE-2022-2414 POC 1. Substitua YOURHOST pelo seu alvo como na url abaixo url = "https://example.com/ca/rest/certrequests"...

CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...

EUVD-2026-94218

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...

CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...

CVE-2026-107103

A SQL Injection vulnerability exists in the Manacle Technologies ERP System due to insufficient validation and parameterization of user-supplied input in an API endpoint . An unauthenticated remote attacker can exploit this by providing specially crafted input to the vulnerable endpoint. Successf...

CVE-2026-107102

The Manacle Technologies ERP System contains an account takeover vulnerability due to improper validation of payment callback parameters and inadequate authentication controls within an API endpoint. An unauthenticated remote attacker can manipulate specific parameters to force the application to...

CVE-2026-107102 Account Takeover Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an...

CVE-2026-107102 Account Takeover Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an...

GoFileX

GoFileX TUI de cliente IRC do final dos anos 90 para percorrer wordlists contra um compartilhamento GoFile protegido por senha. Ele se comunica apenas com a API REST documentada e trata os limites de taxa como regra rígida: requisições sequenciais, um intervalo padrão conservador, cooldown...

WordPress Geliver Akıllı Kargo Pazaryeri plugin 3.0.0-3.1.0 - Unauthenticated API Key Disclosure vulnerability

Unauthenticated API Key Disclosure vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Geliver Akıllı Kargo Pazaryeri versions 3.0.0-3.1.0...

CVE-2015-3073

CVE-2015-3073 यह कमजोरी दूरस्थ हमलावरों को Adobe Reader की कमजोर स्थापनाओं पर API प्रतिबंधों को बायपास करने की अनुमति देती है। इस कमजोरी का शोषण करने के लिए उपयोगकर्ता की सहभागिता आवश्यक है, जिसमें लक्ष्य को एक दुर्भावनापूर्ण पृष्ठ पर जाना या एक दुर्भावनापूर्ण फ़ाइल खोलनी होगी। विशिष्ट दोष...

CVE-2026-86816

The WPCafe WordPress plugin before 3.0.21 does not restrict access to some of its REST API endpoints, allowing unauthenticated attackers to read WooCommerce product data, including per-product sales counts, exact stock levels, and private product meta, that WooCommerce itself keeps behind...

CVE-2026-104049

The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account to read the full content of arbitrary lessons, including lessons of pai...

CVE-2025-8110-Gogs-RCE-Exploit

Gogs CVE-2025-8110 RCE Exploit Um exploit automatizado em Python para CVE-2025-8110 no Gogs. Esta vulnerabilidade permite a Execução Remota de Código RCE ao abusar da API PutContents, que não valida se um caminho de arquivo é um symlink. Ao sobrescrever o arquivo interno .git/config através de um...

CVE-2023-27742

CVE-2023-27742 IDURAR ERP/CRM v1 में /api/login घटक के माध्यम से SQL इंजेक्शन भेद्यता पाई गई। विवरण IDURAR ERP/CRM v1 में /api/login घटक के माध्यम से SQL इंजेक्शन भेद्यता पाई गई। भेद्यता प्रकार SQL इंजेक्शन उत्पाद विक्रेता IDURAR ERP/CRM v1 प्रभावित उत्पाद कोड बेस https://github.com/idurar/erp-cr...

CVE-2026-86816 WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API

The WPCafe WordPress plugin before 3.0.21 does not restrict access to some of its REST API endpoints, allowing unauthenticated attackers to read WooCommerce product data, including per-product sales counts, exact stock levels, and private product meta, that WooCommerce itself keeps behind...