291199 matches found
log4shell
log4shell Python Script to scan the server file system for log4j jars that are vulnerable to CVE-2021-44228 and CVE-2021-45046. The script recursively goes through the file system including zip, ear, war to find log4j versions 2. to 2.15 with org/apache/logging/log4j/core/lookup/JndiLookup.class...
CVE-2023-30258-Exploit-For-Magnus-Billing-System
This repository does not have a README...
CVE-2026-108926
The itsourcecode Baptism Information Management System 1.0 is vulnerable to a SQL injection flaw within the ebaptism.php file. The vulnerability is triggered by the manipulation of the ID argument and can be exploited remotely. While the impact is described as a medium-severity security flaw, the...
EUVD-2026-97821
A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...
CVE-2026-108926 itsourcecode Baptism Information Management System ebaptism.php sql injection
A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...
CVE-2026-108919
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/addstudent.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtpreviousschool causes cros...
CVE-2026-108921
A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysqlquery of the file removeannouncements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missi...
CVE-2026-108922
A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file uploadsave.php. Executing a manipulation of the argument uploadedfile/image can lead to unrestricted upload. The attack may be launche...
CVE-2026-108920
A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/userrecord.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be launch...
CVE-2026-104355
A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote...
kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...
CVE-2019-16098
CVE-2019-16098 This CVE exploits the RTCore64.sys driver and creates a cmd.exe process with system privileges by copying the token of the System process with one of the low-privilege cmd.exe process. Blog about the approach and the methodology can be found here...
kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...
EUVD-2026-97780
A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file uploadsave.php. Executing a manipulation of the argument uploadedfile/image can lead to unrestricted upload. The attack may be launche...
CVE-2026-108922 KusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload
A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file uploadsave.php. Executing a manipulation of the argument uploadedfile/image can lead to unrestricted upload. The attack may be launche...
CVE-2026-108922
A flaw in the KusalkaSilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2 ) allows for unrestricted upload of files. The vulnerability exists in the getimagesize function of the upload_save.php file, where a manipulation of the uploaded_file/image argument can b...
CVE-2026-108922 KusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload
A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file uploadsave.php. Executing a manipulation of the argument uploadedfile/image can lead to unrestricted upload. The attack may be launche...
CVE-2023-49987
CVE-2023-49987 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "tname" parameter on "newterm" Description : A cross-site scripting XSS vulnerability in the component “newterm” of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or...
CVE-2023-49544
CVE-2023-49544 Customer Support System 1.0 - Local File Inclusion Description : Customer Support System 1.0 is vulnerable to Local File Inclusion. An authenticated user has the capability to access and read PHP files from the operating system by exploiting a Local File Inclusion LFI vulnerability...