CVE-2022-40470

CVE-2022-40470 Cross-Site Scripting dans Système de gestion des donneurs de sang utilisant CodeIgniter - 1.0 Description suggérée Phpgurukul Blood Donor Management System 1.0 permet un Cross-Site Scripting via la fonctionnalité Ajouter un groupe sanguin. Informations supplémentaires PoC:...

Breacher

Breacher Un script pour trouver les pages de connexion administrateur et les vulnérabilités EAR. Fonctionnalités Multithreading à la demande Grande liste de chemins 482 chemins Prend en charge les extensions php, asp et html Vérifie les potentielles vulnérabilités EAR Vérifie la présence de...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

CVE-2023-7172

CVE-2023-7172 Обзор Этот проект содержит уязвимую версию системы управления больницей HMS, подверженную SQL-инъекциям CVE-2023-7172. SQL-инъекция — это критическая уязвимость веб-приложений, которая может оказать серьёзное влияние на безопасность и функциональность системы. Детали CVE Идентификат...

CVE-2024-9933

CVE-2024-9933 WatchTowerHQ = 3.10.1 - Обход аутентификации до администратора из-за отсутствия проверки пустого значения Описание: Плагин WatchTowerHQ для WordPress уязвим к обходу аутентификации в версиях до 3.9.6 включительно. Это связано с тем, что значение по умолчанию 'watchtowerotatoken'...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---중요-인증-우회- CVE-2025-41646 - 중요 인증 우회 🔓 CVE-2025-41646 - RevPi WebStatus 인증 우회 PoC RevPi WebStatus ≤ v2.4.5의 심각한 인증 우회 취약점CVE-2025-41646으로 인해 공격자는 약한 타입 비교 로직== vs ===으로 인해 유효한 자격 증명 없이 admin 으로 로그인할 수 있습니다. 📌 영향받는 버전 RevPi WebStatus v2.4.5 및 이하 Apache와 함께 Raspbian에서 실행되는 산업용/OT 시스...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 Неаутентифицированная SQL-инъекция и обход входа CVE-2024-25227 Дата: 23/02/2024 Протестировано на ABO.CMS 5.8 Поставщик: ABO.CMS URL поставщика:https://abocms.ru ABO.CMS 5.8 уязвим для SQL-инъекции через параметр tblogin на странице входа администратора...

EUVD-2026-94455

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an admin account with the password sipcapture stored as a legacy SHA-256 hex hash. There is no first-login...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Жестко закодированные учетные данные администратора в i-doit Pro 25 и ниже i-doit Pro 25 и ниже уязвимы к уязвимости жестко закодированных учетных данных администратора. Эти уязвимости позволяют любому войти как администратор, используя имя пользователя «admin» и пароль «admin»...

CVE-2024-10924

Эксплойт для CVE-2024-10924 WordPress Really Simple Security Plugin - Обход аутентификации 📌 Обзор CVE-2024-10924 — критическая уязвимость обхода аутентификации в плагине Really Simple Security для WordPress версии 9.0.0 – 9.1.1.1. Эта уязвимость позволяет неаутентифицированным злоумышленникам...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — PerfexCRM 3.3.1 미만에서의 인증 우회 / 잘못된 접근 제어 관리자 로그인 요약 취약점 유형: 잘못된 접근 제어 — 인증 우회 영향을 받는 제품: PerfexCRM 참고: 위 단계는 Ajansha Shankar와 Ahamed Yaseen이 보고한 최초 발견 단계입니다. 참고 자료 OWASP 인증 치트 시트 — 서버 측 검증 및 인증 제어에 대한 지침...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - обход брутфорса - CVE-2019-17240 Очень простой скрипт, основанный на CVE-2019-17240. Оригинальный POC и объяснение: https://github.com/bludit/bludit/pull/1090. usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p...

EUVD-2026-85674

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601

A SQL injection vulnerability exists in the Admin Login Handler component of Abdurrab5 online-makeup-store . The flaw is located within an unknown function of the index.php file and is triggered by manipulating the id/password arguments. This vulnerability can be exploited remotely , and the expl...

CVE-2026-96601: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

PT-2026-97606

Name of the Vulnerable Software and Affected Versions Abdurrab5 online-makeup-store affected versions not specified Description An issue exists in the Admin Login Handler component within the index.php file. Remote attackers can perform SQL injection, a technique used to manipulate database...