CVE-2026-105185 itsourcecode Online Admission System examinee.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

CVE-2026-105185

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located within an unknown function of the /admin/examinee.php file, where manipulating the ID argument allows for remote execution of arbitrary SQL commands. The documents state that an exploit is n...

CVE-2026-105185 itsourcecode Online Admission System examinee.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

EUVD-2026-92245

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

cve-2026-8697

CVE-2026-8697: TP-Link Archer C64 로그인 속도 제한 우회 CVE-2026-8697은 TP-Link Archer C64의 OS디버그 메시지에서는 TPOS라고 함의 논리적 결함입니다. 이 결함으로 인해 라우터에 연결된 권한 없는 모든 사용자가 잔여 SSH 서비스를 사용하여 웹 UI 속도 제한을 우회할 수 있습니다. 간단한 Python 스크립트를 사용하여 짧은 시간에 많은 비밀번호를 시도하고 라우터에 대한 전체 관리자 액세스 권한을 얻을 수 있습니다. POC: poc.py 라우터에는 셸을 제공하지 않는 디...

CVE-2026-105184 itsourcecode Online Admission System creteria.php sql injection

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-105184

A security vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/creteria.php file. Improper handling of the ID argument allows for a SQL injection attack, which can be launched remotely. Public exploits for this vulnerability have been disclose...

CVE-2026-105184 itsourcecode Online Admission System creteria.php sql injection

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

EUVD-2026-92244

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2019-18818_CVE-2019-19609

CVE-2019-18818 및 CVE-2019-19609에 대한 익스플로잇 이 저장소에는 CVE-2019-18818 및 CVE-2019-19609의 두 가지 취약점을 악용하는 Python 스크립트가 포함되어 있습니다. CVE-2019-18818 이 취약점은 공격자가 Strapi CMS에서 관리자 사용자의 비밀번호를 재설정할 수 있게 합니다. 사용법 1. 스크립트의 target 및 strapiport 변수를 대상 Strapi 인스턴스에 맞게 수정하세요. 2. 스크립트를 실행하여 관리자 비밀번호를 재설정하세요...

EUVD-2026-92243

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-105183 itsourcecode Online Admission System confirm.php sql injection

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-105183 itsourcecode Online Admission System confirm.php sql injection

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

CVE-2026-105183

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 within an unknown function of the /admin/confirm.php file. The flaw is caused by improper handling of the schedid argument, which allows for remote exploitation. Public exploit code is available, though no specif...

CVE-2026-67279

MikroTik RouterOS PoC コレクション このリポジトリには、2026年に調査・文書化された複数の MikroTik RouterOS セキュリティ問題に関する概念実証PoCスクリプトが含まれています。本資料は、認可されたセキュリティ研究、ラボ環境での検証、および管理されたテストのみを目的としています。 本プロジェクトは本番アプリケーションではなく、汎用ツールでもなく、明示的な認可なしにシステムに対して使用することを意図したものではありません。 スコープ 現在、本コレクションには以下が含まれます: CVE-2026-86060 未認証の SSH...

CVE-2026-23550

🧨 CVE-2026-23550 – Modular Connector 管理バイパス origin=mo パラメータによる非認証 WordPress 管理者ログイン Modular Connector プラグイン ≤ 2.5.1 📖 説明 WordPress用プラグイン Modular Connector （バージョン ≤ 2.5.1 ）には、重大な認証バイパスの脆弱性が存在します。非認証の攻撃者は、JSONパラメータ "origin":"mo" を含む細工されたPOSTリクエストを、REST APIエンドポイント /api/modular-connector/login...

CVE-2026-51565

CVE-2026-51565 CVE-2026-51565 に関するセキュリティアドバイザリ 説明 Modules/Docs/DocsController.php における Milk admin =0.9.8 のクロスサイトスクリプティング（XSS）脆弱性により、リモートの攻撃者が巧妙に細工されたリクエストの action パラメータを介して、任意の Web スクリプトまたは HTML を注入できる可能性があります。 緩和策 公開時点では、この脆弱性に対する公式パッチは開発者から提供されておらず、私が報告してから5か月が経過しています。更新版がリリースされるまでは、ModSecurity...

CVE-2026-105179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-105177

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/adddrug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql...

CVE-2026-105176

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/editclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...