CVE-2026-105231 kishor-23 food-waste-management-system Admin Registration signup.php sql injection

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Wing FTP Server v8.1.2には、セッションシリアル化メカニズムにリモートコード実行（RCE）の脆弱性が存在します。認証された管理者は、ドメイン管理者のmydirectory（ベースフォルダ）フィールドを通じて任意のLuaコードを注入でき、サーバー側でloadfileを介して実行されます。...

CVE-2025-65271

CVE-2025-65271 CVE-2025-65271에 대한 PoC 실행 방법? node server.js 설명 Azuriom CMS 관리자 대시보드의 클라이언트 측 템플릿 주입CSTI을 통해 낮은 권한의 사용자가 관리자 세션 컨텍스트에서 임의의 템플릿 코드를 실행할 수 있습니다. 이는 플러그인이나 대시보드 구성 요소가 신뢰할 수 없는 사용자 입력을 렌더링할 때 발생할 수 있으며, 잠재적으로 관리자 계정으로의 권한 상승이 가능합니다. Azuriom 1.2.7에서 수정되었습니다. 사용 전 면책 조항 저는 이 PoC를 사용하여 타...

CVE-2025-4334

CVE-2025-4334 - Simple User Registration --form 인수: -u / --url → 기본 WordPress URL 예: https://target.com/wordpress/ --form → 등록 양식의 전체 URL 예: https://target.com/wpr/default-registration/ 예시: python3 CVE-2025-4334.py -u https://example.com/wordpress --form...

CVE-2024-45264

CVE-2024-45264 제안된 설명 SkySystem Arfa-CMS 5.1.3132 이전 버전의 관리자 패널에는 사이트 간 요청 위조CSRF 취약점이 있으며, 이를 통해 원격 공격자가 새 관리자를 추가하여 권한을 상승시킬 수 있습니다. 취약점 유형 CWE-352 | 사이트 간 요청 위조 CSRF 제품 공급업체 SkySystem https://skyss.ru/ 영향을 받는 제품 코드 베이스 Arfa-CMS - 5.1.3124 및 이전 버전 영향: 권한 상승 true 공급업체가 취약점을 확인하거나 인정했습니까? true 발견...

EUVD-2026-92250

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

POC-CVE-2026-19626

CVE-2026-19626 — レポート生成におけるRCE（認証済み・非管理者） ステータス: 確認済み — 純リモート、非管理者、REST専用 6.7.2-14.el9 ラボ、2026-08-21。 武器化されたチェーン（これが poc.py の動作です）: 1. 任意の通常組織ユーザーとしてログイン 2. name: "=system''" を指定して POST /rest/group — 波括弧/引用符はそのまま受け入れられる（グループコントローラには文字セットチェックがない） 3. POST /rest/reportDefinition —...

CVE-2026-105187

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-105185

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

EUVD-2026-92248

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site...

CVE-2025-14340

XSS를 통한 관리자 계정 탈취 CVE-2025-14340 Payara의 Administration Rest Interface에서 발생하는 교차 사이트 스크립팅Cross-Site Scripting 취약점으로, 공격자가 통제하는 JavaScript가 실행되어 관리자 계정을 탈취할 수 있습니다. 그 이유는 다음과 같습니다. 1. 패널이 HTTP Basic Auth를 사용합니다동일 출처 요청의 경우 브라우저가 자동으로 자격 증명을 전송함. 2. change-admin-password 엔드포인트는 사용자 비밀번호를 변경할 때 현재...

CVE-2024-10924-PoC

PoC 인증 우회 MFA Really Simple Security WordPress 플러그인 | CVE-2024-10924 WordPress 웹페이지에 접속하면 취약한 플러그인을 통해 MFA가 활성화되어 있는 것을 볼 수 있습니다: PoC를 실행하고 접속 데이터를 제공해야 합니다: 자동으로 관리자 패널 내 임시 .html 파일을 통해 브라우저가 열립니다. 이 시나리오를 재현할 수 있는 취약한 환경을 자동으로 배포하려면 다음 저장소를 사용할 수 있습니다:...

CVE-2026-105187 itsourcecode Online Admission System key.php sql injection

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

EUVD-2026-92247

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-105187 itsourcecode Online Admission System key.php sql injection

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-105187

A SQL injection vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/key.php file. By manipulating the ID argument, an attacker can initiate a remote attack to execute arbitrary SQL commands. The documents state that the exploit has been disclo...

CVE-2026-105183

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-105184

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...