CVE-2026-29115

CVE-2026-29115 — Dahua Authenticated Remote Denial of Service Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29115 Vendor: Dahua Technology Published: 2026-06-10T06:08:21 UTC Last Modified: 2026-06-10T06:08:21 UTC Source: Dahua Product Security Incident PSI Trust Center...

CVE-2018-7848

CVE-2018-7848 Productos afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las versiones Schneider Electric Modicon Quantum Todas las versiones Referencias...

CVE-2022-31793

CVE-2022-31793 -u especificar IP -l especificar archivo de IPs -v modo de verificación -f especificar archivo a leer python poc.py -u ip -v python poc.py -l url.txt -v python poc.py -u ip -f /etc/hosts python poc.py -l url.txt -f /etc/hosts...

CVE-2024-34102

CVE-2024-34102: XXE no autenticado de Magento Herramienta CVEHunter para la detección y explotación de la vulnerabilidad CVE-2024-34102 con rendimiento asíncrono. Instalación git clone https://github.com/th3gokul/CVE-2024-34102.git cd CVE-2024-34102 pip install -r requirements.txt python3...

CVE-2024-4577

CVE-2024-4577 usage: CVE-2024-4577.py -h -v RHOST RPORT URL COMMAND PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 positional arguments: RHOST remote host RPORT remote port URL target address COMMAND command to execute e.g. optional arguments: -h, --help show...

CVE-2022-39802

3242933 – CVE-2022-39802 Vulnerabilidad de recorrido de rutas de archivo en SAP Manufacturing Execution Información general Riesgo: CRÍTICO Versiones afectadas: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 URL del proveedor: https://sap.com Bug: Vulnerabilid...

CVE-2025-41646

CVE-2025-41646 - Bypass de Autenticación en RevPi Webstatus = 2.4.5 Exploit Resumen Este es un script de exploit en Python3 para CVE-2025-41646 , una vulnerabilidad de Bypass de Autenticación que afecta a RevPi Webstatus = 2.4.5. Detalles de la Vulnerabilidad: CVE ID : CVE-2025-41646 Producto...

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

Linux Distros Unpatched Vulnerability : CVE-2026-102804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwaveinit in the library...

CVE-2026-103232

A SQL injection vulnerability exists in the AdithyaYelloju Restaurant-Management-System (up to version 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c ). The flaw is located in the mysqli_query function within the admin/table_booking.php file, where manipulation of the Name argument allows for unauthori...

CVE-2026-103226

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

EUVD-2026-89962

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

CVE-2019-9766

CVE-2019-9766 Haré lo mejor Acerca de CVE Free MP3 CD Ripper Es un conmutador entre archivos .mp3 y otros tipos de archivo convirtiendo un archivo. Bug Según el NVD podemos encontrar que, en la versión 2.6 hay un desbordamiento basado en pila en el área de búfer. Así que podemos crear un PoC para...

CVE-2026-102912 SourceCodester Online Leave Management System page reports sql injection

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

CVE-2026-102847

The gedelumbung HospitalManagement software is vulnerable to Cross-Site Scripting (XSS) due to a flaw in the Guest Book component. Specifically, the kirim function within the file application/modules/web/controllers/buku_tamu.php fails to properly handle the nama , email , and pesan arguments. Th...

CVE-2026-102847 gedelumbung HospitalManagement Guest Book buku_tamu.php kirim cross site scripting

A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function kirim of the file application/modules/web/controllers/bukutamu.php of the component Guest Book. This manipulation of the argument nama/email/pesan causes...

cve-2023-22515-1

🛡️ CVE-2023-22515: Análisis en profundidad de la vulnerabilidad de elevación de privilegios en Confluence !IMPORTANT Alerta de seguridad urgente : Esta vulnerabilidad tiene una puntuación CVSS de 10.0 Crítico , el nivel de riesgo más alto. Si está utilizando una versión afectada, se requiere un...

CVE-2026-102804

A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwaveinit in the library stbhexwave.h. Performing a manipulation of the argument width/oversample results in integer overflow. Remote exploitation of the attack is...

Linux Distros Unpatched Vulnerability : CVE-2026-101016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcpolicyparsedmarc in the library...

CVE-2023-27997-POC

Uso: python3 cve-2022-42475.py rhost rport lhost lport Ejemplo: python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 Descargo de responsabilidad: Este proyecto está creado únicamente con fines educativos y de pruebas éticas. El uso de esta herramienta para atacar objetivos sin...