CVE-2022-40470

CVE-2022-40470 ثغرة برمجية من نوع Cross Site Scripting في نظام إدارة المتبرعين بالدم باستخدام CodeIgniter - 1.0 الوصف المقترح يسمح نظام إدارة المتبرعين بالدم Phpgurukul الإصدار 1.0 بثغرة Cross Site Scripting عبر ميزة إضافة اسم فصيلة الدم. معلومات إضافية الإثبات:...

Breacher

Breacher برنامج نصي للعثور على صفحات تسجيل الدخول الخاصة بالمسؤول وثغرات EAR. الميزات تعدد الخيوط حسب الطلب قائمة مسارات كبيرة 482 مسارًا يدعم امتدادات php و asp و html يفحص عن ثغرات EAR المحتملة يفحص عن ملف robots.txt يدعم المسارات المخصصة الاستخدامات فحص جميع المسارات بامتداد php python breache...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

CVE-2023-7172

CVE-2023-7172 Vue d'ensemble Ce projet contient une version vulnérable d'un système de gestion hospitalière HMS qui est susceptible à l'injection SQL CVE-2023-7172. L'injection SQL est une vulnérabilité critique des applications web qui peut avoir de graves impacts sur la sécurité et la...

CVE-2024-9933

CVE-2024-9933 WatchTowerHQ = 3.10.1 - Contournement d'authentification vers Administrateur en raison d'un manque de vérification de valeur vide Description : Le plugin WatchTowerHQ pour WordPress est vulnérable à un contournement d'authentification dans les versions jusqu'à la 3.9.6 incluse. Cela...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Contournement-Critique-de-l-Authentification- CVE-2025-41646 - Contournement critique de l'authentification 🔓 CVE-2025-41646 - PoC de contournement de l'authentification de RevPi WebStatus Une vulnérabilité critique de contournement de l'authentification CVE-2025-41646 dans RevPi...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Connexion-SQLi-CVE-2024-25227 SQLi non authentifié et contournement de connexion CVE-2024-25227 Date: 23/02/2024 Testé sur ABO.CMS 5.8 Vendeur: ABO.CMS URL du vendeur:https://abocms.ru ABO.CMS 5.8 est vulnérable à une injection SQL via le paramètre tblogin, page de connexion admin. Le...

EUVD-2026-94455

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an admin account with the password sipcapture stored as a legacy SHA-256 hex hash. There is no first-login...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Identifiants administrateur codés en dur dans i-doit Pro 25 et versions antérieures i-doit Pro 25 et versions antérieures sont vulnérables à une vulnérabilité d'identifiants administrateur codés en dur. Ces vulnérabilités permettent à quiconque de se connecter en tant...

CVE-2024-10924

Эксплойт для CVE-2024-10924 WordPress Really Simple Security Plugin - Обход аутентификации 📌 Обзор CVE-2024-10924 — критическая уязвимость обхода аутентификации в плагине Really Simple Security для WordPress версии 9.0.0 – 9.1.1.1. Эта уязвимость позволяет неаутентифицированным злоумышленникам...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Contournement d'authentification / contrôle d'accès incorrect dans PerfexCRM 3.3.1 connexion admin Résumé Type de vulnérabilité : Contrôle d'accès incorrect — Contournement d'authentification Produit affecté : PerfexCRM 3.3.1 CVE : CVE-2025-60375 Publié Brève...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - contournement de brute force - CVE-2019-17240 Script très simple basé sur CVE-2019-17240. POC et explication originaux : https://github.com/bludit/bludit/pull/1090. usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p...

EUVD-2026-85674

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601

A SQL injection vulnerability exists in the Admin Login Handler component of Abdurrab5 online-makeup-store . The flaw is located within an unknown function of the index.php file and is triggered by manipulating the id/password arguments. This vulnerability can be exploited remotely , and the expl...

PT-2026-97606

Name of the Vulnerable Software and Affected Versions Abdurrab5 online-makeup-store affected versions not specified Description An issue exists in the Admin Login Handler component within the index.php file. Remote attackers can perform SQL injection, a technique used to manipulate database...

CVE-2026-96601: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...