CVE-2021-41647

CVE-2021-41647 CVE-2021-41647 Online-Food-Ordering-Web-App의 SQL 인젝션 Online-Food-Ordering-Web-App는 인증되지 않은 오류 기반 및 시간 기반 블라인드 SQL 인젝션 공격에 취약합니다. /login.php 페이지의 username 매개변수는 사용자 입력을 검증하지 않으므로, 공격자는 간단한 우회 기법으로 로그인을 우회할 수 있습니다. 애플리케이션 링크 Online-Food-Ordering-Web-App 영향을 받는 구성 요소 및 매개변수 URL:...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Descripción CVE-2022-42475 es una vulnerabilidad de heap-based buffer overflow en el servicio SSL VPN de FortiOS que permite a atacantes no autenticados ejecutar código arbitrario de forma remota RCE mediante solicitudes...

CVE-2026-23723-POC

CVE-2026-23723 PoC - Auxiliar de Exploração de SQL Injection Autenticada no WeGIA SQL Injection Autenticada Baseada em Erro no WeGIA ≤ 3.6.1 GHSA-xfmp-2hf9-gfjp | Aviso Oficial Autor Original do POC / Relator : ViniCastro2001 GHSA Publicado por : nilsonLazarin mantenedor do projeto Este script...

CVE-2024-10924

CVE-2024-10924 的 PoC Really Simple Plugins WordPress 插件（版本 9.0.0 至 9.1.1.1 包括）的 REST API 中存在一个错误处理缺陷，当启用双因素身份验证时，攻击者可以绕过身份验证并控制现有用户或管理员帐户。 作为一个好人，您还会找到该插件的 9.1.1.1 版本。只需解压并上传到 wp-content/plugins 文件夹。别忘了激活插件并启用 2FA。 需求 使用 pip 安装所需的依赖项： root@kitploit: pip install -r requirements.txt 依赖列表 argparse...

CVE-2023-36874

CVE-2023-36874 Prova di concetto PoC Un'implementazione educativa e difensiva della vulnerabilità CVE-2023-36874 , che dimostra un difetto di escalation locale dei privilegi LPE nel componente Windows Error Reporting WER. ⚠️ Disclaimer Questo repository e il codice sorgente fornito sono destinati...

PT-2026-82549

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

PT-2026-82800

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

CVE-2025-11627

Invia una richiesta appositamente costruita al gestore AJAX con il nonce estratto. root@kitploit: = // 1 find the inline script that contains the AJAX URL const s = ...document.scripts.findsc = sc.textContent.includes'billminozzijserrorcatched'; if !s console.error'Script with ajax URL not found...

CVE-2025-10351-POC

CVE-2025-10351 POC - SQL-Injection-Exploit 💉 POC für CVE-2025-10351: Eine nicht authentifizierte SQL-Injection-Schwachstelle, die einen bestimmten Endpunkt im Melis Platform Framework betrifft. 🔗 Referenzen 📄 CVE-2025-10351 auf MITRE 📄 Melis Platform Warnung auf INCIBE Spanisches Nationales...

CVE-2019-9053

Risolto grazie a https://tryhackme.com/room/easyctf : buon divertimento Problemi critici risolti 1. Compatibilità da Python 2 a Python 3 Prima: print "string" Nuovo: print"string" Modificati tutti gli statement print in funzioni print Aggiornata la formattazione delle stringhe per usare le f-stri...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2020-8277

CVE-2020-8277 Nur zu Bildungszwecken. Schnellstart root@kitploit: dieses Repository klonen $ git clone https://github.com/masahiro331/CVE-2020-8277 bind starten $ docker build -t bind-local ./bind TCP-Fallback erforderlich $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind Verwenden Sie...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer contains a validation process that returns overly descriptive error messages when processing malformed input, enabling an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input. The CVSS 3.1 score is 3.9 (LOW...

CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2024-39719

Анализ уязвимости раскрытия существования файлов в Ollama CVE-2024-39719 中文 Обзор уязвимости CVE-2024-39719 — это уязвимость раскрытия информации о существовании файлов, затрагивающая Ollama версии 0.3.14 и более ранние. Эта уязвимость позволяет злоумышленникам определять наличие конкретных файло...

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability एक्सप्लॉइट लेखक: ersinerenler विक्रेता होमपेज https://code-projects.org/blood-bank-in-php-with-source-code सॉफ़्टवेयर लिंक https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

CVE-2023-3897

CVE-2023-3897 Eine Benutzernamen-Enumeration ist durch Umgehung des CAPTCHA in der On-Premise SureMDM-Lösung auf Windows-Bereitstellung möglich. Der Angreifer kann lokale Benutzerinformationen über Fehlermeldungen enumerieren. Dieses Problem betrifft SureMDM On-Premise: Version 6.31 und niedriger...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Vulnerabilità DoS di soppressione RADIUS in Cisco ISE 🌐 ⚠️ Panoramica 🚨 Vulnerabilità di denial-of-service DoS ad alta gravità in Cisco Identity Services Engine ISE! 💥 Un attaccante remoto non autenticato può bloccare il dispositivo con pacchetti RADIUS appositamente predisposti...

Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

Microfinance Management System V1.0 Vulnerabilità di SQL Injection Non autenticato 1. Descrizione: Microfinance Management System consente SQL Injection tramite il parametro 'customernumber' in /mims/updatecustomer.php. Sfruttando questo problema, un attaccante potrebbe compromettere...

CVE-2025-24963

CVE-2025-24963 - Режим браузера Vitest - Чтение локального файла CVE-2025-24963 — это уязвимость средней степени серьезности оценка CVSS 3.1: 5.9, затрагивающая пакет @vitest/browser, компонент фреймворка тестирования Vitest на основе Vite. Эта уязвимость возникает из-за неправильной проверки...