CVE-2026-105703

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-105704 SourceCodester Drug Recommendation System Auth Guard improper authentication

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

EUVD-2026-92949

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

CVE-2026-105704

A vulnerability exists in SourceCodester Drug Recommendation System 1.0 within the Auth Guard component. The flaw allows for improper authentication by manipulating the user_id argument. This vulnerability can be triggered via a remote attack vector. While specific exploitation links are not prov...

CVE-2026-105704 SourceCodester Drug Recommendation System Auth Guard improper authentication

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – 发生了什么？ 2025年8月，SAP旗舰ERP平台 S/4HANA 被发现其一个RFC启用的功能模块存在漏洞。仅拥有低权限的攻击者可以向该模块注入任意ABAP代码，绕过正常的授权检查并获得完全的系统控制权。 该漏洞并非理论上的好奇心产物——它已被 SecurityBridge威胁研究实验室 利用，并已在本地部署和私有云部署的实际攻击中被积极使用。 2 – 为何重要 问题| 影响 ---|--- 完全系统沦陷| 攻击者可以创建超级用户帐户、修改业务流程并从 USR02 表中提取密码哈希。 所需工作量极小|...

CVE-2026-105703 PHPGurukul User Registration & Login and User Management System Change Password change-password.php authorization

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-105703

The PHPGurukul User Registration & Login and User Management System 3.3 is vulnerable to an incorrect authorization flaw within the Change Password Handler component. Specifically, an unknown function in the file loginsystem/admin/change-password.php fails to properly validate the currentpassword...

EUVD-2026-92938

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-42978-PoC-Research

🛡️ CVE-2026-42978-PoC-Research - Find and Fix Windows Security Risks 👋 Welcome to Your Security Companion This application helps you check if your Windows computer has a specific security weakness called CVE-2026-42978. This weakness involves a part of Windows called Push Notifications WpnService...

globalprotect-ca-cert-ipc

c2us.exe - Lanza un comando como el usuario que ejecuta la sesión de escritorio del usuario conectado. En este caso, lanza cmd.exe como SYSTEM en la sesión de escritorio del usuario sin privilegios. c2us.c - Código fuente para c2us.exe. epinject.exe - Inyector de punto de entrada, utilizado para...

CVE-2025-24076

CVE-2025-24076 Microsoft Windows Cross Device Service 权限提升漏洞利用 概述 此脚本利用了 Windows Cross Device Service 中的一个漏洞，可在 Windows 11 、Windows Server 2025 和 Windows Server 2022 23H2（Server Core 安装） 系统上实现权限提升。 CVE： CVE-2025-24076 CVSS v3.1 评分： 7.3（重要） 类型： 权限提升 弱点： CWE-284 - 不正确的访问控制 攻击向量： 本地 所需权限： 低 用户交互： 需要...

CVE-2024-4577

CVE-2024-4577: Vulnerabilidad crítica en las configuraciones CGI de PHP Existe un grave fallo de seguridad en el modo CGI de PHP que permite a los atacantes ejecutar comandos arbitrarios manipulando los parámetros de la URL. Versiones afectadas Versiones de PHP anteriores a 7.4.29 y 8.0.19 en...

CVE-2026-105486

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

Kaseya VSA 2017 ConnectWise ManagedITSync - Remote Code Execution

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run...

CVE-2022-3942

CVE-2022-3942 Sanitization Management System 中的跨站脚本漏洞 描述：Sanitization Management System v1.0 存在一个跨站脚本（XSS）漏洞，攻击者可通过在请求报价表单的备注或地址字段中注入精心构造的有效载荷，执行任意 Web 脚本或 HTML。一旦登录的工作人员或管理员用户打开该报价，XSS 即被触发——加之 Cookie 未设置 HttpOnly 标志，因此该漏洞可能被用于窃取登录用户的 Cookie。 复现步骤：...

EUVD-2026-92916

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

CVE-2026-105486 OSSRS srs System API api.go systemAPI.Run missing authentication

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

CVE-2026-105486 OSSRS srs System API api.go systemAPI.Run missing authentication

A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and...

CVE-2026-105486

The OSSRS srs software (up to version 7.0-a1 ) contains a vulnerability in the System API component. Specifically, the systemAPI.Run function within the internal/proxy/api.go file lacks proper authentication, allowing for remote manipulation. Public exploits for this vulnerability are currently a...