CVE-2024-57429

CVE-2024-57429 Una vulnerabilidad de falsificación de solicitudes entre sitios CSRF en la función pjActionUpdate de PHPJabbers Cinema Booking System v2.0 permite a atacantes remotos escalar privilegios engañando a un administrador autenticado para que envíe una solicitud no autorizada. Impacto: L...

CVE-2024-27198

ES GenTeamCityExploit es una herramienta PoC dirigida a una vulnerabilidad en el servidor TeamCity CVE-2024-27198. Permite descubrir una versión de TeamCity y crear un nuevo usuario administrador explotando una falla de omisión de autenticación. Características Extrae la versión del servidor...

CVE-2026-2991

KiviCare = 4.1.2 - Authentication Bypass CVE-2026-2991 PoC 📜 Description CVE-2026-2991 is an authentication bypass vulnerability in the KiviCare – Clinic & Patient Management System EHR WordPress plugin affecting all versions up to and including 4.1.2. The plugin exposes a public REST endpoint at...

CVE-2026-105263

Shaarli versions up to 0.16.3 are vulnerable to a server-side request forgery (SSRF) flaw in the Admin Metadata Endpoint . The root cause is located in the MetadataController function within the file application/front/controller/admin/MetadataController.php, where a manipulation of the url argume...

CVE-2026-105263 Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgery

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...

EUVD-2026-92316

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...

CVE-2026-105062

The Brandtoss WP Admin Audit plugin for WordPress (versions n/a through 1.2.17 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This issue allows for exploiting incorrectly configured access control security levels . The impact is categorized as Medium severity with a CVSS3.1 s...

CVE-2026-105062 WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...

EUVD-2026-92309

Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...

WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin WP Admin Audit versions = 1.2.17...

CVE-2026-2587-Exploit-POC

CVE-2026-2587 Exploit PoC — Validador de inyección EL/RCE en Eclipse GlassFish Validador PoC seguro para CVE-2026-2587, un problema crítico de inyección EL/RCE que afecta el manejo de gadgets de la consola de administración de Eclipse GlassFish a través de /common/gadgets/gadget.jsf. Esta...

EUVD-2026-92297

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-105254

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located within an unspecified function of the /admin/schoolyear.php file, where manipulation of the sy argument allows for remote exploitation. While an exploit is reported as publicly available, sp...

CVE-2025-59718-PoC

CVE-2025-59718 Exploit Wizard Resumen Esta herramienta es un script de explotación de prueba de concepto PoC para CVE-2025-59718, una vulnerabilidad crítica de omisión de autenticación en productos Fortinet por ejemplo, FortiOS, FortiProxy, FortiSwitchManager debido a la verificación incorrecta d...

CVE-2026-105253

The itsourcecode Online Admission System Project 1.0 is vulnerable to a SQL injection vulnerability in the /admin/login1.php file. The flaw is caused by improper processing of the User argument, which allows an unauthenticated remote attacker to execute arbitrary SQL commands. The exploit has bee...

CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2021-39409

CVE-2021-39409 El registro de cuentas de administrador es posible en Online Student Rate System v1.0, lo que permite a un actor malicioso crear una cuenta de administrador y acceder al panel de administración. Vulnerabilidad POST /ajax.php?action=signup HTTP/1.1 Host: localhost User-Agent:...

CVE-2026-36436-Public-Reference-Pack

CVE-2026-36436-Public-Reference-Pack Summary A vulnerability in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code using standard browser developer tools to...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...