EUVD-2026-81281

In AVideo through 29.0, Like::construct performs counter arithmetic on raw request values before validation, allowing array-typed parameters to desynchronize stored votes from counters. Authenticated attackers can send array-typed like parameters followed by ordinary requests to drive video like...

CVE-2026-92581

In AVideo through 29.0 , the Like::__construct() method performs counter arithmetic on raw request values before validation. This allows array-typed parameters to desynchronize stored votes from denormalized counters. An authenticated attacker can send array-typed like parameters followed by ordi...

CVE-2026-92793

GoAdmin (through version 1.2.26 ) contains an authorization bypass in its permission-checking middleware. The root cause is a failure to properly anchor the logout pattern when validating permissions, allowing any authenticated user to append a query parameter containing the admin prefix followed...

CVE-2025-29306

CVE-2025-29306 FOXCMS黔狐内容管理系统服务参数注入漏洞 一、漏洞简介 FoxCMS是一套可免费商用且开源的网站管理系统,采用PHP+MySQL架构。 FOXCMS黔狐内容管理系统存在服务参数注入漏洞，攻击者可利用该漏洞获取服务器控制权。 二、漏洞影响 FOXCMS黔狐内容管理系统 V1.2 三、复现过程 POC http://xx/images/index.html?id=%24%40printphpinfo 输入Poc访问漏洞页面 发现phpinfo命令执行后的信息...

EUVD-2026-81054

Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...

CVE-2026-92791 Uber Kraken through 0.1.29 Path Traversal via tag parameter

Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...

CVE-2026-92791

Uber Kraken versions through 0.1.29 contain a path traversal vulnerability in the /tags/{tag} endpoint. The endpoint fails to validate the tag parameter, allowing unauthenticated attackers to supply percent-encoded parent-directory segments (e.g., ..) to traverse outside the configured storage ro...

CVE-2026-92770

Harbor through 2.15.2 is affected by a scanner credential disclosure vulnerability. The root cause is an improper restriction on the q query parameter used for filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column t...

CVE-2026-92770 Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter

Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...

CVE-2026-92748 BC Security Empire before 6.7.1 Path Traversal File Upload RCE

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...

CVE-2026-92748

BC Security Empire before version 6.7.1 contains a path traversal vulnerability in its upload endpoints. The root cause is a failure to validate the multipart filename parameter , allowing authenticated operators to use path traversal sequences to write files to arbitrary locations on the C2 serv...

CVE-2025-34030-PoC

CVE-2025-34030 - RCE en el parámetro 'plot' de sar2html CVSS: 10.0 Crítico Vulnerabilidad: Inyección de comandos del sistema operativo Lenguaje de programación: PHP Código del exploit: Python Referencias: https://nvd.nist.gov/vuln/detail/CVE-2025-34030...

CVE-2025-61456

🛡️ CVE 披露：CVE-2025-61456 — 电子商务项目中的反射型 XSS 披露日期： 2025 年 10 月 14 日 CVE ID： CVE-2025-61456 严重性： 中危（CVSS 6.1） 🧩 摘要 E-commerce Project v1.0 中存在一个反射型跨站脚本（XSS）漏洞，具体位于 index.php 端点。URL 路径参数中的未净化输入被直接反射回响应 HTML 中，攻击者可借此在访问恶意链接或提交构造请求的用户浏览器中执行任意 JavaScript。 该问题已被分配标识符 CVE-2025-61456 。在披露时，供应商尚未发布补丁 。 📦...

CVE-2026-76426 Cisco ISE REST API SQL Injection Vulnerability

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database. This vulnerability is due to insufficient validation of specific parameters that are then concatenated into an SQL...

CVE-2025-55182-exploit

CVE-2025-55182-exploit TL;DR 此工具仅用于合法的渗透测试目的。请勿参与任何非法活动。 使用方法 python3 exploit.py 演示视频...

CVE-2025-24813-apache-tomcat

CVE-2025-24813 Nuclei 模板 CVE-2025–24813 root@kitploit: nuclei -l list.txt -t CVE-2025–24813.yaml 执行 shell root@kitploit: http://target.com/updates.jsp?cmd=whoami...

CVE-2026-81866

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - HotelDruid 3.0.7 反射型 XSS 漏洞 描述 DigitalDruid HotelDruid v.3.0.7 中存在跨站脚本攻击漏洞，攻击者能够通过 creabackup.php 端点中的 ripristinabackup 参数执行任意代码并获取敏感信息 严重性与影响 影响 攻击者可诱骗已认证用户访问精心构造的 URL，从而在其浏览器中触发恶意 JavaScript。潜在后果包括： 会话劫持： 攻击者可窃取会话 Cookie，非法访问用户账户。 钓鱼或恶意软件投递： 用户可能被重定向至恶意网站，或攻击者控制的脚本直接在界面中注入恶意内容。...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS 反射型XSS v3.2.3 作者：Sergio 描述： Evolution v.3.2.3 安装过程中的管理员选项存在多个反射型跨站脚本（XSS）漏洞，允许本地攻击者通过向 cmsadmin、cmsadminemail、cmspassword 和 cmspasswordconfim 参数注入精心构造的负载来执行任意 Web 脚本。 攻击向量： 在数据库安装管理员选项过程中，对 cmsadmin、cmsadminemail、cmspassword 和 cmspasswordconfim 参数的消毒存在漏洞，允许注入 JavaScript 代码。 POC：...

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability 漏洞利用作者：ersinerenler 厂商主页 https://code-projects.org/blood-bank-in-php-with-source-code 软件链接 https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概述 Code-Projects Blood Bank V1.0 存在一个严重的安全漏洞，涉及通...