CVE-2026-47117-openmed-rce

CVE-2026-47117: OpenMed PII 모델 로딩을 통한 인증되지 않은 원격 코드 실행 심각도: 치명적Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 CNA인 VulnCheck가 배정 벡터 v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 벡터 v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 영향 범위: OpenMed 1.5.2 수정 버전: 1.5.2 CWE: CWE-94 코드 생...

CVE-2026-86172

CVE-2026-86172 is an SQL injection vulnerability in DefaultFuction CRM version 1.0.0 , located in the file /modules/customers/delete.php . An attacker can manipulate the ID argument to inject SQL commands, enabling remote exploitation with low privileges required and no user interaction. The CVSS...

CVE-2026-86172 DefaultFuction CRM delete.php sql injection

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

EUVD-2026-72075

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

CVE-2026-86172 DefaultFuction CRM delete.php sql injection

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

onecli

팀을 위해 만들어진 에이전트 하네스. 기업을 위한 프로 어시스턴트. 모든 직원에게 안전하고 샌드박스 처리된 개인 에이전트를 제공하세요. 웹사이트 · 문서 · Discord 빠른 시작 클라우드 호스팅: onecli.sh 자체 호스팅 root@kitploit: git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setup http://localhost:10254 열기 OneCLI v2란 무엇인가요? OneCLI는 AI 에이전트를 팀 단위...

omapi-cve-2015-6606-exploit

Simple Exploit for Verification of CVE-2015-6606 This is a simple exploit to verify a code injection vulnerability that exists in the SEEK smartcard service versions 3.1.0 and below CVE-2015-6606, Google internal bug ANDROID-22301786. The vulnerability allows specially crafted Android application...

CVE-2026-86171

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

PoC-CVE-2024-44349

PoC-CVE-2024-44349 Уязвимость обнаружена и протестирована в Anteeo WMS - v4.7.31 Уязвимость позволяет злоумышленникам формировать SQL-команду внутри параметра имени пользователя и раскрывать данные в базе данных. Затронутые версии ANTEEO B2B WMS — с v.4.7.x по v.4.7.34 исключая. Использование 1...

CVE-2025-10230

CVE-2025-10230 — Samba WINS 훅 명령 주입 저자는 이 도구로 인한 오용 또는 손상에 대해 책임을 지지 않습니다. 연구는 교육 및 방어 목적으로만 제공됩니다. 설명 이 저장소에는 Samba의 WINS 훅hook 메커니즘의 명령 주입 취약점인 CVE-2025-10230 에 대한 개념 증명PoC이 포함되어 있습니다. 이 취약점은 다음 조건의 Samba 설치에 영향을 미칩니다: wins support = yes가 활성화된 경우 wins hook = ...에 사용자 정의 셸 명령이 정의된 경우 서버가 잘못된...

CVE-2026-47103-python-statemachine-rce

CVE-2026-47103: SCXML eval 주입을 통한 Python StateMachine 원격 코드 실행 심각도: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 CNA인 VulnCheck가 할당 Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 영향받는 버전: Python StateMachine = 3.0.0,...

CVE-2025-59470-PostgreSQL-Command-Injection

影響を受けるソフトウェア: PostgreSQL 15.7 未満の 15.x、16.3 未満の 16.x 脆弱性タイプ: pgbackup拡張機能におけるコマンドインジェクション 説明: pgbackup拡張機能はユーザー指定のパラメータを適切にサニタイズしていないため、バックアップ操作者が任意のコマンドを注入し、PostgreSQLユーザーとして実行される可能性があります。...

POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

Database Ghost 🔥 Продвинутый инструмент эксплуатации SQL-инъекций PostgreSQL 🚨 ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ ТОЛЬКО ДЛЯ АВТОРИЗОВАННОГО ТЕСТИРОВАНИЯ БЕЗОПАСНОСТИ Неавторизованное использование незаконно. Используйте только на системах, которыми вы владеете или на тестирование которых имеете явное...

CVE-2025-55182

CVE-2025-55182 RCE Инструмент для самопроверки, используется для проверки уязвимости CVE-2025-55182 Принцип уязвимости React Server Components при декодировании полезной нагрузки, отправляемой на конечные точки серверных функций, содержат дефект разрешения пути. Путем разделения свойств объекта...

xwiki_solrsearch-rce-exploit

solrsearch-rce-exploit XWiki SolrSearch에 대한 인증되지 않은 RCE PoC CVE-2025-24893. 명령 실행 + 리버스 셸. CVE-2025-24893 – XWiki SolrSearch RCE PoC XWiki SolrSearch 템플릿 인젝션을 통해 인증되지 않은 원격 코드 실행을 유발하는 개념 증명. XWiki Debian 15.10.8 에서 테스트됨 15.10.11 / 16.4.1 / 16.5.0RC1에서 패치됨. ⚠️ 교육 목적으로만 사용하세요. 소유하지 않거나 명시적 테스트 허가를...

CVE-2026-86170

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

EUVD-2026-72067

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

CVE-2026-86171 DefaultFuction CRM delete.php sql injection

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

CVE-2026-86171 DefaultFuction CRM delete.php sql injection

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

CVE-2026-86171

DefaultFuction CRM 1.0.0 is affected by a SQL injection vulnerability in the file /modules/orders/delete.php, triggered by manipulation of the ID argument. The attack is remotely exploitable over the network with low privileges required and no user interaction. The exploit has been publicly discl...