EUVD-2026-76738

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

CVE-2026-90456

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

CVE-2026-90456

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

CVE-2026-90456

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

CVE-2026-90456

CVE-2026-90456 affects a bundled inventory-management component whose example environment-configuration file ships with a fixed, publicly-known administrative password . If a deployment copies this example file into active configuration without running the setup routine that regenerates credentia...

Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

GHSA-G3F9-G5VJ-P62F Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

exploit-cve-2023-36808

CVE-2023-36808 - Inyección SQL no autenticada en GLPI Vulnerabilidad Las versiones de GLPI se inyecta directamente en una consulta SQL sin sanitización: root@kitploit: SELECT id FROM glpiagents WHERE deviceid = '' No se requiere autenticación. La vulnerabilidad permite acceso de lectura completo ...

aws-recon

AWS Recon 一款用 Ruby 编写的多线程 AWS 安全清单收集工具。 该工具旨在高效收集大量 AWS 资源属性与元数据。它目标是收集与 AWS 环境安全配置及状态相关的几乎所有内容。 现有工具（例如 AWS Config）虽然能执行某些资源收集，但在覆盖范围和特异性上不足以准确衡量安全状态（例如详细的资源属性数据、完整解析的策略文档以及嵌套的资源关系）。 AWS Recon 通过利用自动重试（无论是网络可靠性问题还是 API 限流）、自动分页处理大型响应（每次 API 调用超过 100 个资源）以及多线程并行请求来加速收集，从而处理大型账户的收集工作。 项目目标...

PT-2026-90545

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

PT-2026-90525

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

aws-inventory

Introducción Esta es una herramienta que intenta descubrir todos los recursos de AWS creados en una cuenta. AWS tiene muchos productos también conocidos como servicios y constantemente se añaden nuevos, mientras que los existentes se amplían con nuevas funciones. El ecosistema permite a los...

geiger

geiger Un contador Geiger para agentes de IA. Un único comando de solo lectura que inventaría cada agente de IA, harness, servidor MCP, plugin y extensión de IA en una máquina — y te dice, en lenguaje sencillo, a qué puede acceder cada uno. root@kitploit: npx geiger-scan Sin instalación. Sin...

CVE-2026-11518-XSS

使用PHP和MySQL的库存系统中的存储型XSS漏洞 漏洞详情 字段| 详情 ---|--- 漏洞类型| 存储型跨站脚本 Stored XSS 受影响的应用| 使用PHP和MySQL的库存管理系统 供应商| SourceCodester 受影响版本| 1.0 受影响文件| register.php 参数| fullname, username 是否需要认证| 否（未认证） 影响| 管理员会话劫持，在管理面板中执行恶意脚本 CVSS 评分| 8.8（高危） CVSS 向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N 描述...

CVE-2026-76904

GeoServer WFS Inventario y verificación autorizada Este repositorio contiene dos scripts de Python para la investigación de endpoints WFS de GeoServer. Resumen wfsinventory.py Propósito: Inventariar capas, campos XSD y valores WFS, así como verificar candidatos opcionalmente mediante una...

EUVD-2026-75219

A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This vulnerability affects the function storeCustomerOrderInvoice of the file includes/manage.php. Performing a manipulation of the argument proname results in sql injection. The...

EUVD-2026-75211

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument...

EUVD-2026-75213

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes/invoicebill.php of the component Invoice Generation. Such manipulation of the argument orderdate/invoiceno leads to...

EUVD-2026-75220

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

EUVD-2026-75189

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function DBOperation.addCategory of the file includes/process.php of the component AJAX Backend. The manipulation of the argument useri...