EUVD-2026-64721

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-78185

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/cust_edit.php . An authenticated remote attacker can exploit this by manipulating the ID parameter, achieving partial impact on confidentiality, integrity, ...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING Atténuation d'urgence temporaire pour CVE-2026-60137 et CVE-2026-63030 wp2shell کاهش مخاطره اضطراری و موقت برای زنجیره آسیب‌پذیری wp2shell 🇬🇧 Description en anglais Ce plugin WordPress léger sert de correctif virtuel temporaire mitigation contre la chaîne...

CVE-2025-64459-Poc

CVE-2025-64459: Django ORM SQL इंजेक्शन PoC भेद्यता: QuerySet और Q कीवर्ड आर्गुमेंट अनपैकिंग के माध्यम से SQL इंजेक्शन। CVE ID: CVE-2025-64459 द्वारा खोजा गया: मैं Cyberstan प्रकटीकरण तिथि: 5 नवंबर, 2025 🚨 कार्यकारी सारांश इस रिपॉजिटरी में एक डॉकरीकृत प्रूफ ऑफ कॉन्सेप्ट PoC है जो Django ORM में ए...

wp2shell

wp2shell استغلال الخلط في التوجيه في REST API الخاص بووردبريس CVE-2026-63030 + حقن SQL CVE-2026-60137 في نقطة النهاية الدفعية لتحقيق تنفيذ أكواد عن بُعد. الثغرات الخلط في التوجيه CVE-2026-63030 نقطة النهاية الدفعية /batch/v1 في REST API الخاص بووردبريس لا تعزل توجيه الطلبات بشكل صحيح. من خلال تدا...

CVE-2026-78182 Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

EUVD-2026-64709

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

CVE-2026-78182

A SQL injection vulnerability in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System (versions up to 300R004C00B300 ) is triggered via the order/sort argument of the PlanController.getImmediatePlans function at /xbreport/api/v1/plamange/plansImmediate. The attack is remote, ...

CVE-2018-17254

CVE-2018-17254 root@kitploit: Exploit Title: Joomla JCK Editor 6.4.4 - 'parent' SQL Injection Googke Dork: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ Vendor Homepage: http://docs.arkextensions.com/downloads/jck-editor Version: 6.4.4 Tested on: Debian 10 Ubuntu Windows 11/10 CVE :...

CVE-2026-9082

ماسح Drupal CVE-2026-9082 ماسح شبه سلبي يكتشف تثبيتات Drupal التي قد تكون عرضة لـ CVE-2026-9082 حقن SQL في PostgreSQL. لا يتم إرسال أي حمولات SQL. لا توجد طلبات تغير الحالة. الإصدارات الضعيفة الفرع| المتأثر| المُصحَّح ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x| 10.5.0 — 10.5.9| 10.5.10...

CVE-2026-78171

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – استغلال حقن SQL في Code‑Projects Hotel &ourism Reservation 1.0 -orange -red أداة استغلال متكاملة ومتعددة الخيوط لحقن SQL الأعمى القائم على الوقت Time‑based Blind SQL Injection لثغرة CVE‑2026‑14762. تستهدف نقطة النهاية /admin/rooms.php في تطبيق Code‑Projects Hotel & Tourism...

CVE-2025-57819-POC

CVE-2025-57819 — حقن SQL في FreePBX → RCE PoC CVE-2025-57819 هي ثغرة حرجة من نوع حقن SQL في FreePBX تسمح لمهاجم غير مصادَق بتحقيق تنفيذ كود عن بُعد من خلال الربط بين حقن SQL وحقن مهام cron. ⚠️ إخلاء مسؤولية : هذا المستودع مخصص لأغراض الاختبارات الأمنية المصرح بها والتعليم فقط. الاستخدام غير المصرح...

wp-cve-2026-63030-check

wp2shell-check Vérificateur d'exposition non intrusif pour la chaîne RCE pré-authentification "wp2shell" de WordPress CVE-2026-63030 + CVE-2026-60137. ⚠️ Utilisation autorisée uniquement. Exécutez ceci uniquement sur des instances WordPress que vous possédez ou pour lesquelles vous avez une...

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC Sans authentification Résumé Les versions 15, 16 et 17 de FreePBX contiennent une vulnérabilité d'exécution de code à distance RCE causée par une insuffisance de nettoyage des données fournies par l'utilisateur dans les points de terminaison. Un attaquant sans authentification peu...

wp2shell-detect

wp2shell-detect ब्लैकबॉक्स, गैर-हस्तक्षेपी डिटेक्टर wp2shell के लिए — वर्डप्रेस कोर में पूर्व-प्रमाणीकरण RCE श्रृंखला जो 2026-07-17 को प्रकट हुई: CVE-2026-63030 — REST बैच एंडपॉइंट में रूट कन्फ्यूजन /wp-json/batch/v1: एक उप-अनुरोध जिसका पथ wpparseurl में विफल होता है, वह वैलिडेशन ऐरे में तो पहुंच...

wp2shell_scanner

wp2shellscanner ماسح كشف غير تدخّلي لثغرات النواة الحديثة في WordPress — بما في ذلك سلسلة تنفيذ الأكواد عن بُعد RCE قبل المصادقة المعروفة باسم wp2shell. يستخرج wp2shellscanner.py بصمة إصدار نواة WordPress ويقرأ سطح واجهة REST API المُعلنة علنًا، ثم يصنّف كل ثغرة CVE في النواة مُتتبَّعة بشكل مستقل...

CVE-2026-78171

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/processlogin.php. The manipulation of the User argument allows a remote, unauthenticated attacker to inject SQL queries, potentially compromising confidentiality, integrity, and availabilit...

CVE-2026-78171 itsourcecode Sales and Inventory System processlogin.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

EUVD-2026-64693

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...