CVE-2023-30092

CVE-2023-30092 Tous les détails sur CVE-2023-30092 Logiciel: Online Pizza Ordering System 1.0 Lien du logiciel: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Type de vulnérabilité: SQL Injection Composant affecté: QTY Parameter Impact déni de...

CVE-2006-3392

CVE-2006-3392 https://www.cvedetails.com/cve/CVE-2006-3392/ Webmin avant 1.290 et Usermin avant 1.220 appellent la fonction simplifypath avant de décoder le HTML, ce qui permet à des attaquants distants de lire des fichiers arbitraires, comme démontré avec les séquences "..%01", qui contournent l...

CVE-2018-19410-POC

CVE-2018-19410-POC Preuve de concept pour la vulnérabilité CVE-2018-19410 Détails PRTG Network Monitor Version : 18.2.39.1661 et antérieures Niveau de gravité : Élevé Impact : Contournement d'authentification, Autorisation inappropriée, Inclusion de fichier local Vecteur d'accès : À distance La...

CVE-2026-15598

CVE-2026-15598 В antv layout 2.0.0 выявлена уязвимость. Уязвимость затрагивает функцию setNestedValue в библиотеке lib/util/object.js. Выполнение манипуляции с аргументом path может привести к неконтролируемому изменению атрибутов прототипа объекта. Атака может быть запущена удалённо. Проект был...

CVE-2026-107937

A flaw was found in Apache CXF. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a crafted multipart request containing excessively large or repeated attachment headers. Because the parser fails to properly enforce size and count limits on multi-line and repeated...

CVE-2026-97791

A flaw was found in Apache CXF. This vulnerability allows an authentication bypass when validating Security Assertion Markup Language SAML tokens. Because the token validator shares validation state across concurrent requests, a remote, unauthenticated attacker can submit a forged assertion signe...

slmail-exploit

Ces scripts Python sont uniquement à des fins éducatives ! ⚫ Exemple d'utilisation : python exploit.py 192.168.0.100 ip victm N'OUBLIEZ PAS D'OUVRIR LA PORTE DANS VOTRE MACHINE...

certsync

certsync certsync est une nouvelle technique pour extraire NTDS à distance, mais cette fois sans DRSUAPI : elle utilise golden certificate et UnPAC the hash. Elle fonctionne en plusieurs étapes : 1. Extraire la liste des utilisateurs, les informations de l'AC et la CRL de LDAP 2. Extraire le...

CVE-2026-78795

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information...

EUVD-2026-95700

In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one object shared by all requests, so one request could read another's result. A remote, unauthenticated attacker could send a forge...

CVE-2026-106436

A flaw was found in the MongoDB PHP Driver. The Binary JSON BSON encoder fails to properly check return values when data exceeds the library size limit, leaving the encoder in an invalid state. An unauthenticated remote attacker who can induce the application to encode an unusually large data...

CVE-2026-78020

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains an Improper Certificate Validation vulnerability (CWE-295). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Remote execution , Information disclosure , and Denia...

EUVD-2026-95569

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...

CVE-2026-106491

A flaw was found in the Backstage plugin-proxy-backend component. An authenticated remote attacker can exploit improper input validation by submitting a specially crafted request URL to the proxy backend. This causes the proxy service to forward requests to endpoints outside the configured base...

EUVD-2026-95565

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

avscript

Interpréteur JavaScript de l'Antivirus Avast NOTE : Le 03/11/2020, Avast a annoncé avoir décidé de désactiver cet interpréteur mondialement ! Le processus principal de l'antivirus Avast s'appelle AvastSvc.exe et s'exécute en tant que SYSTEM. Ce service charge le moteur antivirus de bas niveau et...

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

В этом репозитории нет README...

Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload

Cisco ISE and Cisco ISE-PIC contain an unrestricted file upload vulnerability caused by lack of file validation in an internal API, letting unauthenticated remote attackers upload and execute files as root, exploit requires crafted file upload. id: CVE-2025-20282 info: name: Cisco ISE 3.4P2 -...

Bank Locker Management System - Cross-Site Scripting

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...