CVE-2024-52301-Research

CVE-2024-52301-Forschung Ein wenig Recherche zu CVE-2024-52301. Ich habe die Schwachstelle gesehen und wollte herausfinden, wie Laravel angreifbar ist. Dazu habe ich einfach die Versionen 6.20.44 und 6.20.45 verglichen und nachvollzogen, wie GET-Parameter letztendlich die Anwendungskonfiguration...

HotelDruid-CVE-2021-42948

CVE-2021-42948 HotelDruid Hotel Management Software v3.0.3 et versions antérieures ont été découvertes comme exposant des jetons de session dans plusieurs liens via des paramètres GET, permettant aux attaquants d'accéder aux identifiants de session des utilisateurs. Le jeton de session utilisé po...

CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Verwendung: python3 cve-2024-29895.py -u https://target.com/ -c id Betrifft Cacti-Versionen 1.3.X in DEV-Builds, bei denen cmdrealtime.php vorhanden und POLLERID aktiviert ist. Über diesen Endpunkt ist eine Befehlsinjektion möglich, indem eine GET-Anfrage mit dem Payloa...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 CVE-2024-9796 भेद्यता के लिए कार्यशील PoC, जो WordPress में WP Advanced Search ऑटोकम्प्लीशन प्लगइन को प्रभावित करता है, जो अनसैनिटाइज़्ड GET पैरामीटर्स के माध्यम से SQL इंजेक्शन SQL Injection की अनुमति देता है। 📌 विवरण यह भेद्यता एक हमलावर को ऑटोकम्प्लीशन...

Wordpress-ebook-CVE-2016-10924

O plugin Wordpress eBook Download 1.1 tem uma vulnerabilidade de divulgação de arquivos ao abusar do parâmetro get no arquivo filedownload.php. Este script realiza força bruta em diferentes processos no servidor usando esta vulnerabilidade. USO: python pidbrute.py...

CVE-2026-58457

CVE-2026-58457 - Nicht authentifizierte OS-Befehlsinjektion im Shenzhen Aitemi M300 Wi-Fi Repeater !WARNING Dieser Code wird WIE BESEHEN nur für Bildungs- und Forschungszwecke bereitgestellt. Verwenden Sie diesen PoC nicht auf Produktionssystemen, gemeinsam genutzten Umgebungen oder nicht...

semcms

Introduction à Semcms SEMCMS est un système de gestion de contenu CMS pour sites web de commerce extérieur qui supporte plusieurs langues. root@kitploit: v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip Causes des vulnérabilités : /xcR45qAdmin/SEMCMSMenu.php Ligne 66...

CVE-2025-55885

CVE-2025-55885 Descrizione Vulnerabilità di SQL Injection in Alpes Recherche et Developpement ARD GEC en Ligne prima della v.2025-04-23 che consente a un attaccante remoto di aumentare i privilegi tramite i parametri GET in index.php Vettori d'attacco SQL Injection tramite il parametro GET non...

CVE-2025-66947

CVE-2025-66947 Iniezione SQL cieca basata sul tempo in krishanmuraiji SMS v1.0 ⏱️ Confronto visivo: risposta normale vs risposta ritardata di 6s 🔍 Riepilogo TL;DR: Un parametro GET in un modulo amministrativo consente l'iniezione SQL basata sul tempo tramite ritardi nella risposta. In...

CVE-2025-7606

CVE-2025-7606 code-projects AVL Rooms Project V1.0/city.php SQL注入 受影响产品名称 AVL Rooms 供应商主页 https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ 提交者 dazhi 漏洞文件 /city.php 版本 V1.0 软件链接 https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/...

CVE-2026-74251

Nicht authentifizierte SQL-Injection über den Attributfilter in Phoca Cart Phoca Cart ≤ 6.1.6 — Nicht authentifizierter Angreifer extrahiert die vollständige Datenbank durch zeitbasierte Blind-Injection ZUSAMMENFASSUNG Die GET-Array-Parameter a Attribut und s Spezifikation der öffentlichen...

CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 Vulnerabilità di indicizzazione delle directory Descrizione L'indicizzazione delle directory nel portale di accesso del portale di accesso di TOTOLINK-A702R-V1.0.0-B20161227.1023 consente a un attaccante di accedere alle directory /icons/ tramit...

CVE-2026-76569

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

CVE-2026-76569

Phoca Download extension versions 5.0.0 through 6.1.4 for Joomla contains a reflected XSS flaw in the search GET parameter; attacker-supplied input is reflected unescaped, enabling script execution in a victim's browser. CVSS 4.0 scores it Medium (5.3). No exploitation or patch version is documen...

EUVD-2026-62504

OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the page response without sanitization. An attacker can craft a URL that executes arbitrary JavaScript in the browser of any...

PT-2026-78468

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.3.0 Description A cross-site request forgery issue exists in the DICOM viewer. The web path GET parameter in the DICOM viewer page is embedded as a URL without proper sanitization or validation against expected path...

EUVD-2026-59941

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses without parameterization or escaping. An...

CVE-2026-74251

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses without parameterization or escaping. An...

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the document.title assignment in JavaScript, where user-supplied GET parameters are...