CVE-2018-25422 MOGG web simulator Script All Version SQL Injection via play.php

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...

CVE-2018-25422 MOGG web simulator Script All Version SQL Injection via play.php

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...

CVE-2018-25422

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...

MOGG web simulator: SQL injection vulnerability

MOGG web simulator Script is a Web application scripting environment developed by spider312. The MOGG web simulator Script has a SQL injection vulnerability. This vulnerability stems from the id parameter being susceptible to SQL injections, allowing unauthenticated attackers to execute arbitrary...

PT-2026-45122

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...

CVE-2018-25422: Improper Neutralization of Special Elements used in an SQL Command

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...

500px-display-simulator (0.0.1-SNAPSHOT), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0, <=1.16.9) +702 more potentially affected by unknown CVE via subtext (>=1.1.1, <=4.4.1)

subtext NPM version =1.1.1, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.1.0, =1.2.2, =1.0.8-rc.1, =13.5.1, =1.0.0-alpha.1, =4.0.5, =0.6.0, =0.1.1, =0.1.0, =16.1.3 and more Source cves: unknown CVE Source advisory: MEND:WS-2020-0033...

WS-2019-0288

Http-live-simulator before 1.0.8 is vulnerable to Denial of Service DOS. The package fails to catch an exception that causes the Node process to crash, effectively shutting down the server. This allows an attacker to send an HTTP request that crashes the server...

WS-2018-0198

The http-live-simulator module doesn't set a root directory and allows any arbitrary paths to be accessed on the file system and returned to requesting clients...

com.hazelcast.simulator:dist (>=0.5, <=0.6), com.hazelcast.simulator:hazelcast-simulator-dist (0.4) +20 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (7.0.54)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.hazelcast.simulator:dist =0.5, =0.5, =2.1, =0.4.0, =1.0.4, =1.0.5, =1.1.2, =1.1.2, =1.2....

CVE-2026-43248

In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhostvdpa Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them. While we're at it, fix a bug in vdpasim where a valid ASID can be assign...

PT-2026-37588

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost component where the vdpa group bound check was duplicated, increasing the risk of a parent driver omitting the check. Additionally, a bug in vdpa sim allows ...

Exploit for CVE-2026-27778

PoC-SimulatorCVE-2026-27778...

UERANSIM security vulnerabilities

UERANSIM is an open-source advanced 5G UE and RAN gNodeB simulator developed by Ali Güngör of Turkey. Versions of UERANSIM 3.2.7 and earlier contained security vulnerabilities. These vulnerabilities stemmed from improper handling of the parameter pdulength in the Radio Link Simulation Layer...

darkmarket-vuln-lab

🕶️ Dark Market Simulator An intentionally vulnerable CTF-...

Cyber Defense Benchmark: Agentic Threat Hunting Evaluation for LLMs in SecOps

We introduce the Cyber Defense Benchmark, a benchmark for measuring how well large language model LLM agents perform the core SOC analyst task of threat hunting: given a database of raw Windows event logs with no guided questions or hints, identify the exact timestamps of malicious events. The...

NEMU security vulnerabilities

NEMU is an open-source teaching system simulator developed by XiangShan. NEMU has a security vulnerability, which stems from insufficient Smstateen permissions. This vulnerability may allow low-privilege code access to IMSIC state, potentially leading to cross-context information leaks or...

CVE-2026-5387

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer Administrator roles, resulting in privilege escalation with potential for modification of simulation parameters, training configuration, an...

CVE-2026-5387: Missing Authorization

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer Administrator roles, resulting in privilege escalation with potential for modification of simulation parameters, training configuration, an...

PT-2026-33078

Name of the Vulnerable Software and Affected Versions AVEVA Pipeline Simulation affected versions not specified Description An issue exists where unauthenticated network access allows a remote attacker to perform operations intended only for Simulator Instructor or Simulator Developer Administrat...