EUVD-2026-68139

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been...

PT-2026-83539

A vulnerability was determined in Beetel 450TC3 01.00.00 01. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

PT-2026-83519

A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse request of the file trick source/sim services/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer...

PT-2026-83635

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A remote null pointer dereference can occur due to improper processing within the src/amf/namf-handler.c file of the Transfer Endpoint component. A null pointer dereference happens when a program...

PT-2026-83541

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630 B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

PT-2026-83637

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A weakness in the SMF component allows a remote attacker to cause a reachable assertion by manipulating the preemptCap argument within the smf nudm sdm handle get function located in the...

PT-2026-83551

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

PT-2026-83636

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A flaw in the N1-N2 Message Handler component allows a remote attacker to cause a denial of service. This occurs through the manipulation of the ngapIeType variable within the...

PT-2026-83632

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A remote memory corruption issue exists in the AMF component within the amf namf comm decode ue mm context list function located in the src/amf/namf-handler.c file. The flaw is triggered by the...

CVE-2025-66478-Exploit-PoC

CVE-2025-66478 Exploit PoC Dieses Repository enthält Proof-of-Concept PoC-Code zur Reproduktion und Untersuchung der Next.js CVE-2025-66478-Sicherheitslücke. Es enthält eine verwundbare Next.js-Anwendung und ein Node.js-Exploit-Skript zum Testen der Schwachstelle. Englisch · 中文 Was ist...

CVE-2026-82424

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-82423

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

CVE-2026-82424

PHPGurukul Student Information System 1.0 contains a SQL injection vulnerability in the file /student_edit1.php , triggered by manipulating the ID argument. The attack can be launched remotely with low privileges and no user interaction. The exploit has been made publicly available as a proof-of-...

CVE-2026-82424 PHPGurukul Student Information System student_edit1.php sql injection

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been...

wp2shell-Exploit-Waf-Bypass

root@kitploit: | \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress Pre-Auth RCE — CVE-2026-63030 + CVE-2026-60137 di Venexy M4xSec Esecuzione remota di codice senza autenticazione su WordPress 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1. Corretto in...

CVE-2026-82422

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

CVE-2026-82423

A behavioral workflow enforcement vulnerability exists in the macrozheng mall project (up to version 1.0.3 ). The issue affects the Payment Status Endpoint at the file /order/paySuccess, where manipulation of the orderId argument allows a remote, low-privilege attacker to enforce a behavioral wor...

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

Struts2Vuln

Applicazione Struts2 vulnerabile Requisiti 1. Maven https://maven.apache.org 2. Struts = 2.5.10 CVE-2017-5638 - Apache Struts 2 RCE tramite form multipart Requisiti 1. Individuare un URL che invia una richiesta POST multipart form Per iniziare 1. L'applicazione / server può essere avviato con il...