15937 matches found
CVE-2020-15492
CVE-2020-15492 此漏洞由我本人发现并披露。本仓库将包含安全公告、漏洞利用代码以及存在漏洞的软件安装程序，供您实验此漏洞。 本仓库仅用于教育目的。 链接 安全公告 SYSS-2020-028 SySS 博客文章 Exploit-DB 上的漏洞利用 厂商通知 MITRE 条目 NVD 条目...
CVE-2024-7029-EXPLOIT
CVE-2024-7029-EXPLOIT...
CVE-2019-9053
CVE-2019-9053 --- Python3 原始 Exploit 来源: https://www.exploit-db.com/exploits/46635 POC 视频 -- https://attackdefense.com/challengedetailsnoauth?cid=1326 attackdefense...
CVE-2023-22855
CVE-2023-22855 Esta vulnerabilidad fue descubierta y divulgada por Nico Viakowski y por mí. Este repositorio contendrá el aviso y el exploit. Este repositorio es solo con fines educativos. Enlaces Sitio web del fabricante: https://www.kardex.com/en/mlog-control-center Exploit en Exploit-DB:...
EUVD-2026-75211
A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument...
EUVD-2026-75182
A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...
CVE-2026-87933 DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...
CVE-2026-87933
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...
EUVD-2026-75225
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...
PT-2026-89190
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils MergePatch of the file cJSON Utils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request t...
CVE-2026-87925
A SQL injection vulnerability in Rizwan17 inventory-management-system (up to commit bfe78a3) affects the storeCustomerOrderInvoice function in includes/manage.php. Manipulating the pro_name[] argument allows a remote, unauthenticated attacker to inject SQL, leading to partial compromise of confid...
CVE-2026-87923
CVE-2026-87923 affects the Rizwan17 inventory-management-system GitHub project, specifically the List Handler component in the file includes/DBOperation.php. The vulnerability is a cross-site scripting (XSS) flaw caused by improper handling of the category_name, brand_name, and product_name argum...
CVE-2026-87921
A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...
CVE-2026-87922
CVE-2026-87922 affects Rizwan17 inventory-management-system (up to commit bfe78a3), a web-based inventory application. The vulnerability exists in the DBOperation.addCategory function within includes/process.php, part of the AJAX Backend component. By manipulating the userid argument, an unauthen...
CVE-2022-0847-DirtyPipe-Exploit
在 Linux Kernel 直至 5.10.101/5.15.24/5.16.10（操作系统）中发现了一个漏洞，且被归类为严重。该漏洞影响了组件 Pipe Handler 的某些未知处理过程。受影响的是机密性、完整性和可用性。 该漏洞于 2022 年 3 月 8 日披露。公告发布在 dirtypipe.cm4all.com。该漏洞的标识符为 CVE-2022-0847。已知易于利用。攻击可能远程发起。利用时需要简单的认证。技术细节未知，但已有公开的利用代码。 升级至版本 5.10.102、5.15.25 或 5.16.11 可消除此漏洞。应用补丁能够解决该问题。修复程序已可下载，地址为...
CVE-2025-54068-livewire
CVE-2025-54068 - Livewire v3.6.3 漏洞实验室 此文件夹构建了一个极简的 Laravel + Livewire v3 应用程序，固定使用 Livewire 3.6.3 （易受攻击的版本），用于复现 CVE-2025-54068 。 挂载的组件被有意编写为与公开的漏洞利用链兼容（它允许第 1 阶段的强制类型转换为数组步骤）。 快速开始 root@kitploit: docker compose up -d --build 打开： http://localhost:18081/ 验证（安全 PoC） 这会运行一个类似于公开漏洞利用链的两步请求序列，但使用一个带内...
CVE-2023-23396
CVE-2023-23396 这里你可以下载利用代码。 这里你可以阅读我的报告。 这里你可以请我喝杯咖啡 🦄 附注 在撰写本文时（2023-04-07），Microsoft Excel 的客户端版本仍然存在漏洞（这里有更多信息）。 分享知识！...
CVE-2017-16088
CVE-2017-16088 利用 CVE-2017-16088 https://www.wispwisp.com/?p=559...
2023-2245
Se encontró una vulnerabilidad en hansunCMS 1.4.3. Ha sido declarada como crítica. Esta vulnerabilidad afecta a código desconocido del archivo /ueditor/net/controller.ashx?action=catchimage. La manipulación conduce a una subida sin restricciones. El ataque puede iniciarse de forma remota. El...