CVE-2026-104638

A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...

CVE-2026-104637

A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...

CVE-2026-104613

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

CVE-2026-104613

The CodeAstro Simple Pharmacy Management System 1.0 is vulnerable to an SQL injection vulnerability within the /SimplePharmacy-PHP/product/view.php file. The root cause is the improper manipulation of the ID argument , which allows for remote execution of the attack. The exploit has been publicly...

CVE-2025-58098

CVE-2025-58098 exec cmd=... директива CVE-2025-58098 внедрение аргумента Лаборатория docker build -t cve-2025-58098-lab . docker run -it -p 8080:80 cve-2025-58098-lab Уязвимая Исправленная...

CVE-2026-104606

A security flaw exists in the itsourcecode Online Admission System Project 1.0 . An unknown function within the confirm.php file is vulnerable to SQL injection due to the improper handling of the ID argument. This vulnerability can be exploited remotely. The documents indicate that an exploit has...

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - Windows에서의 PHP CGI 인자 주입 "WorstFit" 개요 CVE-2024-4577은 Windows의 PHP CGI 구현에서 발생하는 치명적인 원격 코드 실행 취약점입니다. 이 취약점은 Windows의 "Best-Fit" 코드 페이지 변환을 악용하여 CGI 쿼리 문자열을 통해 명령줄 인자를 몰래 전달함으로써 기존 CVE-2012-1823에 대한 패치를 우회합니다. CVSS 점수: 9.8 치명적 발견자: Orange Tsai DEVCORE 유형: OS 명령 주입 / 인자 주입 패치 날짜:...

CVE-2026-91784

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacker can create a process with a crafted name beginning with -- e.g. containing a target user's UID. When the user running...

CVE-2026-91784 Argument Injection leading to arbitrary process termination in gotop

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacker can create a process with a crafted name beginning with -- e.g. containing a target user's UID. When the user running...

CVE-2026-91784 Argument Injection leading to arbitrary process termination in gotop

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacker can create a process with a crafted name beginning with -- e.g. containing a target user's UID. When the user running...

EUVD-2026-91318

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacker can create a process with a crafted name beginning with -- e.g. containing a target user's UID. When the user running...

CVE-2026-91784

The cjbassi/gotop utility is vulnerable to local argument injection within its process termination functionality. The software fails to sanitize process names before passing them directly to the pkill command. A local attacker can exploit this by creating a process with a crafted name starting wi...

CVE-2025-63821

CVE-2025-63821 Soumis par : Nicola Giuffrida Informations Fournisseur : TOTOLINK Site Web du fournisseur : TOTOLINK Modèle : A720R Version du firmware : V4.1.5cu.630B20250509 Adresse de téléchargement du firmware : TOTOLINK Sévérité CVSS v4.0 Score de base : 4.8 Moyen Vecteur :...

CIMCown

CIMCown CVE-2026-20200 Внедрение аргументов в Cisco IMC с RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

CVE-2021-4034

CVE-2021-4034 — PwnKit Escalade de privilèges locale · Recherche de Mémoire de Master -orange Vulnérabilité de corruption mémoire dans l'utilitaire pkexec de polkit Escalade de privilèges locale → root via écriture hors limites Affecté : polkit 0.105-31 et versions antérieures · Correctif : polki...

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Détection et exploitation automatisées des vulnérabilités PHP critiques CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh est un outil d'évaluation de sécurité monofichier, sans configuration , qui découvre automatiquement les points de...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | Эксплойт удаленного выполнения кода RCE в PHP-CGI Эксплойт на Python для CVE-2012-1823. Эта уязвимость позволяет атакующему выполнить произвольный код на сервере, работающем под уязвимой версией PHP-CGI, путем внедрения аргументов командной строки через строку запроса. 📝 Обзор...

CVE-2025-24893-POC

CVE-2025-24893-POC Un POC pour CVE-2025-24893 écrit en Python Utilisation python3 -u the url...

CVE-2026-30225-OliveTin-RCE

OliveTin — выполнение действий без аутентификации → RCE + CVE-2026-30225 PoC для повышения привилегий / удалённого выполнения кода против экземпляров OliveTin, работающих с поставляемыми настройками гостевого доступа по умолчанию. Проверено на OliveTin 3000.10.0, работающем от root HTB: Enigma, г...

CVE-2026-24061

CVE-2026-24061 - обход аутентификации в telnetd о чём речь инъекция аргументов в telnetd из GNU InetUtils. Версии 1.9.3 до 2.7. CVSS 9.8. В CISA KEV с 26.01.2026, то есть активно эксплуатируется в дикой природе. Весь трюк заключается в том, что telnetd берёт значение переменной окружения USER от...