HotelDruid-CVE-2021-42948

CVE-2021-42948 HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's. The session token used to access authenticated pages of the application is passed using GET...

CVE-2026-58457

CVE-2026-58457 - 深圳Aitemi M300 Wi-Fi中继器中的未认证操作系统命令注入 !WARNING 此代码按“原样”提供，仅用于教育和研究目的。 请勿在生产系统、共享环境或任何未授权目标上使用此 PoC。 运行或托管此代码可能触发杀毒软件检测、安全监控警报，若被滥用还可能引发法律后果。 作者和仓库维护者对此代码造成的任何损害、滥用或非法活动不承担任何责任 。 仅在获得适当授权的隔离实验室环境中使用。 仅供防御性研究、漏洞分析和蓝队测试使用。 漏洞摘要 smacfilterconf 处理程序中存在一个未认证 的操作系统命令注入漏洞。name、enable 和 mac...

CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Uso: python3 cve-2024-29895.py -u https://target.com/ -c id Afecta a las versiones de Cacti 1.3.X en compilaciones DEV donde cmdrealtime.php está presente y POLLERID está habilitado. La inyección de comandos es posible a través de este endpoint, solicitando por GET con ...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

Wordpress-ebook-CVE-2016-10924

Wordpress eBook Download 1.1 प्लगइन में filedownload.php फ़ाइल के get पैरामीटर का दुरुपयोग करके फ़ाइल प्रकटीकरण भेद्यता मौजूद है। यह स्क्रिप्ट इस भेद्यता का उपयोग करके सर्वर पर विभिन्न प्रक्रियाओं को ब्रूट फोर्स करती है। उपयोग: python pidbrute.py...

CVE-2024-9796

CVE-2024-9796 PoC SQLi - CVE-2024-9796 针对 CVE-2024-9796 漏洞的功能性 PoC，该漏洞影响 WordPress 的 WP Advanced Search（自动补全）插件，允许通过未净化的 GET 参数进行 SQL 注入。 📌 描述 该漏洞允许攻击者通过自动补全端点的 t 参数注入任意 SQL 查询： /wp-content/plugins/wp-advanced-search/class.inc/autocompletion/autocompletion-PHP5.5.php ⚠️ 仅限教育用途及授权环境使用 。 🧰 要求 Python...

CVE-2024-52301-Research

CVE-2024-52301-अनुसंधान CVE-2024-52301 के आसपास थोड़ा अनुसंधान। मैंने इस कमजोरी को देखा और जानना चाहता था कि Laravel कैसे कमजोर है। इसके लिए, मैंने बस 6.20.44 और 6.20.45 संस्करणों को diff किया, और पता लगाया कि GET पैरामीटर कैसे एप्लिकेशन कॉन्फ़िगरेशन को बदल सकते हैं। मैंने इसके बारे में X और...

semcms

Introduction à Semcms SEMCMS est un système de gestion de contenu CMS pour sites web de commerce extérieur qui supporte plusieurs langues. root@kitploit: v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip Causes des vulnérabilités : /xcR45qAdmin/SEMCMSMenu.php Ligne 66...

CVE-2025-55885

CVE-2025-55885 Descrizione Vulnerabilità di SQL Injection in Alpes Recherche et Developpement ARD GEC en Ligne prima della v.2025-04-23 che consente a un attaccante remoto di aumentare i privilegi tramite i parametri GET in index.php Vettori d'attacco SQL Injection tramite il parametro GET non...

CVE-2025-66947

CVE-2025-66947 Iniezione SQL cieca basata sul tempo in krishanmuraiji SMS v1.0 ⏱️ Confronto visivo: risposta normale vs risposta ritardata di 6s 🔍 Riepilogo TL;DR: Un parametro GET in un modulo amministrativo consente l'iniezione SQL basata sul tempo tramite ritardi nella risposta. In...

CVE-2025-7606

CVE-2025-7606 code-projects AVL Rooms Project V1.0/city.php SQL注入 受影响产品名称 AVL Rooms 供应商主页 https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ 提交者 dazhi 漏洞文件 /city.php 版本 V1.0 软件链接 https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/...

CVE-2026-74251

Nicht authentifizierte SQL-Injection über den Attributfilter in Phoca Cart Phoca Cart ≤ 6.1.6 — Nicht authentifizierter Angreifer extrahiert die vollständige Datenbank durch zeitbasierte Blind-Injection ZUSAMMENFASSUNG Die GET-Array-Parameter a Attribut und s Spezifikation der öffentlichen...

CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 Vulnerabilità di indicizzazione delle directory Descrizione L'indicizzazione delle directory nel portale di accesso del portale di accesso di TOTOLINK-A702R-V1.0.0-B20161227.1023 consente a un attaccante di accedere alle directory /icons/ tramit...

CVE-2026-76569

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

CVE-2026-76569

Phoca Download extension versions 5.0.0 through 6.1.4 for Joomla contains a reflected XSS flaw in the search GET parameter; attacker-supplied input is reflected unescaped, enabling script execution in a victim's browser. CVSS 4.0 scores it Medium (5.3). No exploitation or patch version is documen...

EUVD-2026-62504

OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the page response without sanitization. An attacker can craft a URL that executes arbitrary JavaScript in the browser of any...

PT-2026-78468

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.3.0 Description A cross-site request forgery issue exists in the DICOM viewer. The web path GET parameter in the DICOM viewer page is embedded as a URL without proper sanitization or validation against expected path...

EUVD-2026-59941

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses without parameterization or escaping. An...

CVE-2026-74251

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses without parameterization or escaping. An...

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the document.title assignment in JavaScript, where user-supplied GET parameters are...