CVE-2026-105188

The code-projects Human Resource Management System 1.0 is vulnerable to a cross-site scripting (XSS) vulnerability within the Live Event History component. Specifically, manipulating the eventSubject argument in the file /views/admin/liveEventHistory.php allows for the execution of malicious scri...

CVE-2025-47812

CVE-2025-47812 不適切な入力検証により、リモートコード実行からシステム全体の侵害に至る 📘 はじめに: RCE SecurityのJulien Ahrens氏が、WingFTPに影響を与える重大なセキュリティ脆弱性を発見しました。CVE-2025-47812として追跡されるこの脆弱性のCVSSスコアは10です。この脆弱性が悪用されると、リモートの未認証の攻撃者が任意のコードを実行し、システム全体が侵害される可能性があります。 Wing FTP...

PhantomFS

Fake Files. Real Security. Virtual honeypot file system for Windows — lure attackers into a directory that looks real, then catch them in the act. What Is PhantomFS? PhantomFS uses the Windows Projected File System ProjFS to surface a virtual directory full of convincing decoy files — financial...

CVE-2017-1000475

CVE-2017-1000475: Freesshd Unquoted Service Path Prove of concept Windows 10 with freeSSHd 1.3.1, installed by default and with the option running as a system service. Command to check Unquoted Service Path. The service is unquoted by default. The process is running as SYSTEM by default. Create a...

EUVD-2026-92247

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-105187

A SQL injection vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/key.php file. By manipulating the ID argument, an attacker can initiate a remote attack to execute arbitrary SQL commands. The documents state that the exploit has been disclo...

CVE-2026-105187 itsourcecode Online Admission System key.php sql injection

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-105187 itsourcecode Online Admission System key.php sql injection

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

waidps

waidps 無線監査、侵入検知・防止システム PyCryptoに依存しています。インストールするにはpip install pycryptoを実行してください。（削除 - 暗号化機能） YouTube動画プレイリスト - https://www.youtube.com/watch?v=aGTQAWoeujA&index=1&list=PLrekpjW7JwW-T0CeXP8GwudtJmTJ6KZ8O ブログ - http://syworks.blogspot.com/2014/04/waidps-wireless-auditing-intrusion.html ファンページ -...

CVE-Factory

CVE-Factory：コードセキュリティ脆弱性のためのエキスパートレベルのエージェントタスクのスケーリング CVE-Factoryは、完全自動化されたエンドツーエンドのCVE再現のためのマルチエージェントシステムです。CVEレコードを入力すると、システムは自動的に詳細を調査し、テストケースを生成し、Docker環境を構築し、各脆弱性が悪用可能かつパッチ可能であることを検証します。このパイプラインは、人手を介さずにCVEメタデータを再現可能でテスト可能な脆弱性環境に変換します。 ⚠️ セキュリティ警告 :...

CVE-2026-105186

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 within an unknown function of the /new.php file. An attacker can exploit this flaw by manipulating the schedid argument, which allows for remote execution. The documents confirm that an exploit has been published...

EUVD-2026-92246

A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

elevationstation

Elevation Station Stealing and Duplicating SYSTEM tokens for fun & profit! We duplicate things, make twin copies, and then ride away. You have used Metasploit's getsystem and SysInternals PSEXEC for getting system privs, correct? Well, here's a similar standalone version of that...but without the...

elevationstation

Elevation Station 재미와 이익을 위해 SYSTEM 토큰을 훔치고 복제합니다! 우리는 물건을 복제하고, 쌍둥이 사본을 만든 다음, 타고 떠납니다. Metasploit의 getsystem과 SysInternals PSEXEC를 사용하여 시스템 권한을 얻어본 적이 있나요? 음, 여기 그와 비슷한 독립 실행형 버전이 있습니다... AV 문제 없이... 적어도 지금은요 😸 이 도구를 사용하면 TrustedInstaller 가 될 수도 있습니다. Process Hacker/System Informer가 할 수 있는 것과...

system_bt_AOSP10_r33-CVE-2020-0138

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40347: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection Unauthenticated Exploit Title: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection Unauthenticated Date: 2022-06-09 Exploit Author: Hamdi Sevben Vendor Homepage:...

CVE-2026-105182

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

CVE-2026-105181

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2026-105184

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...