481411 matches found
CVE-2026-30655
CVE-2026-30655 — SQL Injection in esiclivre password reset Summary A SQL injection vulnerability exists in the password reset endpoint of esiclivre. An unauthenticated attacker can inject SQL via the cpfcnpj POST parameter, potentially resulting in unauthorized access to sensitive information...
CVE-2026-34724
🚨 CVE-2026-34724 - Zammad 7.0.1 - Server-Side Template Injection SSTI to Remote Code Execution RCE via AI Agent 📌 Overview Zammad is a popular open-source web-based helpdesk and customer support system. CVE-2026-34724 is a Server-Side Template Injection SSTI vulnerability in the new AI Agent...
CVE-2026-25513
CVE-2026-25513: FacturaScripts has SQL Injection in API ORDER BY Clause Overview...
CVE-2025-63419
CVE-2025-63419 CrushFTP قبل الإصدار 11.3.760 معرض لثغرة حقن HTML. الخادم المستند إلى الويب يحتوي على ميزة تتيح للمستخدمين مشاركة الملفات، حيث تعكس الميزة اسم الملف إلى حقل نص البريد الإلكتروني دون أي تعقيم مما يؤدي إلى حقن HTML. CWE CWE-79 — تحييد غير صحيح للإدخال أثناء إنشاء صفحة الويب Cross-sit...
USBCoercer
Supported Targets| ESP32-S3 ---|--- USBCoercer: A TinyUSB based WPAD Coercion Device USBCoercer turns an ESP32 development board with native USB-OTG into an Ethernet-over-USB gadget capable of coercing proxy configuration via WPAD. It builds on the TinyUSB Network Control Model NCM example and ad...
CVE-2024-36039_PoC
CVE-2024-36039: PyMySQL Object Injection to SQL Injection PoC A complete, reproducible Proof of Concept PoC laboratory for CVE-2024-36039 , demonstrating how an Object Injection vulnerability in PyMySQL versions = 1.1.0 can be escalated to a full SQL Injection using MariaDB's ODBC Escape Sequence...
CVE-2025-48932---exploit
Invision Community SQL Injection Exploit CVE-2025-48932 A proof-of-concept exploit demonstrating a SQL injection vulnerability in Invision Community versions = 4.7.20. ⚠️ Disclaimer This tool is provided for educational and authorized security testing purposes ONLY. Unauthorized access to computer...
NXLoader
NXLoader Launch Fusée Gelée payloads from stock Android. Get APK file here Heavily based on Fusée Gelée and ShofEL2. fusee.bin is bundled as a default payload Note: Any proprietary payloads are neither tested nor supported by this software. Does it work on your device? Please make it everyone kno...
django-connector-CVE-2025-64459-testbed
Django-CVE-2025-64459-Testbed A self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter parameter injection via dictionary expansion using Docker. About the Vulnerability CVE-2025-64459 is a high-severity vulnerability in Django specifically versions 5.1.14 that allows...
CVE-2026-1492
CVE-2026-1492 User Registration & Membership = 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration 🔴 Vulnerability Overview CVE-2026-1492 — Unauthenticated Privilege Escalation via Membership Registration Description: The User Registration & Membership plugin for WordPress is...
Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis
1. Native API & APC Injection The x64dbg memory dump reveals that Agent Tesla uses Native API NT API calls for low-level operations, including APC Asynchronous Procedure Call injection. Key Functions Observed: NtQueueApcThread – Injects code into a target thread via APC. NtReadVirtualMemory –...
CVE-2026-24061
GNU InetUtils telnetd تجاوز المصادقة عبر حقن الوسائط - CVE-2026-24061 📚 مقدمة ثغرة حقن وسائط تم اكتشافها مؤخرًا في GNU InetUtils telnetd تسمح للمهاجمين بتجاوز المصادقة عن طريق تعيين متغير البيئة USER إلى القيمة “-f root”. ونتيجة لذلك، يمكن لمهاجم بعيد غير مصادق الوصول إلى الأنظمة التي تعمل بخدمة...
Weblate-CVE-2026-24126
Weblate — قراءة ملفات تعسفية عبر حقن وسيط أمر SSH اكتشفه: Alejandro Baño · يناير 2026 اعترف به: ملاحظات إصدار Weblate 5.16 نظرة عامة تمرر نقطة نهاية إدارة مفاتيح SSH في Weblate معامل host المقدم من مسؤول مصادق مباشرة إلىssh-keyscan دون أي تنقية أو تحقق من الوسائط. نظرًا لأن ssh-keyscan يقبل علامة...
CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0
CVE-2026-32127 - SQL Injection Vulnerability in OpenEMR 8.0.0 Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not...
Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection
CVE-2025-25257 Detection Engineering Repository Overview This repository provides production-ready detection engineering content for CVE-2025-25257 , a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. Successful exploitation can lead...
CVE-2026-33917_SqlInjectionVulnerabilityOpenEMR8.0.0
CVE-2026-33917 - ثغرة حقن SQL في OpenEMR الضعف CWE-89 تحييد غير سليم للعناصر الخاصة المستخدمة في أمر SQL حقن SQL يبني المنتج كل أمر SQL أو جزءًا منه باستخدام مدخلات متأثرة خارجيًا من مكوّن علوي upstream component، لكنه لا يحيد العناصر الخاصة أو يحيدها بشكل غير صحيح، وهي العناصر التي قد تعدّل أمر...
CVE-2024-25081_2025-47273
CVE-2024-25081 and CVE-2025-47273 Proof of Concept FontForge ≤ 20230101 version and Setuptools library Proof of concept for elevating privileges to the user running a task that uses Font Forge. The second CVE elevates privileges to root, provided you have write permissions to sensitive directorie...
CVE-2025-34037
CVE-2025-34037 Python port of the Linksys tmUnblock.cgi RCE exploit For educational use only. Run against your own devices. Vulnerability The tmUnblock.cgi endpoint on several Linksys router models accept POST requests without validating the Authorization header. the ttcpip parameter is passed...
GHSA-GCR2-9V8M-GQ45 DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)
Summary @dicebear/core builds avatar SVGs from caller-supplied options. The numeric rotate option is interpolated into an SVG transform attribute without XML-escaping. It is typed as a number, but nothing checks the type at runtime, so a string value passes straight through and can break out of t...
