CVE-2026-92221

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generateindexpasien of the file application/models/appglobaladminmodel.php. Executing a manipulation of the argument cari can lead to sql...

CVE-2026-73450

On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...

hayduk

Hayduk: Open-source Metasploit GUI and Armitage alternative Hayduk is a free, open-source Metasploit GUI for authorized penetration testing. It brings the Armitage workflow to your browser: map hosts, browse modules, manage Meterpreter and shell sessions, and export campaign reports. Download one...

CVE-2024-11318

CVE-2024-11318 IDOR - AbsysNet 2.3.1 用户劫持 免责声明 此工具旨在帮助识别和利用特定CVE-2024-11318漏洞的应用程序是否易受攻击。它适用于网络安全专业人员、研究人员和渗透测试人员，在获得明确授权的情况下评估环境的安全性。 如果确认存在漏洞，仅当您拥有应用程序或系统所有者的适当授权时，才能进行利用。 未经授权使用此工具针对您不拥有或未经明确许可测试的系统或网络是非法且不道德的。作者对此工具造成的任何滥用或损害不承担任何责任。 使用此工具即表示您同意遵守所有相关法律和道德标准。在测试或利用漏洞之前，请始终确保您拥有明确许可。 描述 该漏洞影响...

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

EUVD-2026-80091

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2026-92247

CVE-2026-92247 affects synaptik-cms up to version 1.3.4.4 . The vulnerability resides in the rename function of admin/file-manager.php within the Admin File Manager component, where manipulation of this function leads to unrestricted upload of files. The attack can be initiated remotely but requi...

CVE-2025-7558-PoC

CVE-2025-7558-PoC 摘要 一个被标记为严重的漏洞存在于 code-projects Voting System 1.0 中。受影响的元素是文件 /admin/positionsadd.php 中的一个未知函数。对参数 Description 的操作导致了 SQL 注入。此漏洞被记录为 CVE-2025-7558。攻击可远程执行。此外，存在可利用的漏洞利用程序。 详情 在 code-projects Voting System 1.0 中发现了一个漏洞，并被归类为严重。受此问题影响的是文件 /admin/positionsadd.php 中的未知部分。对参数...

EUVD-2026-80082

A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generateindexpasien of the file application/models/appglobaladminmodel.php. Executing a manipulation of the argument cari can lead to sql...

CVE-2026-92221

A SQL injection vulnerability exists in gedelumbung HospitalManagement (up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8), specifically in the function generate_index_pasien within application/models/app_global_admin_model.php. Manipulating the cari argument allows a remote attacker with hig...

CVE-2026-92215

A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agentsdks/python/a2uiagent/src/a2ui/extensions/fileresolve/fileresolver.py of the component FileResolver. The manipulation leads to server-side request forgery. I...

CVE-2026-92216

A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/webcore/src/v09/rendering/generic-binder.ts of the component Binder. The manipulation results in open redirect. It is possible to launch the attack remotely. The proje...

CVE-2026-92217

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/webcore/src/v09/processing/message-processor.ts of the component Message Parsing. This manipulation causes dynamically-determined object attributes. The attack can be...

CVE-2026-92214

A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projects/a2a-chat-canvas/src/lib/services/sanitizer-markdown-renderer-service.ts of the component a2a-chat-canvas. Executing a manipulation can lead to cross site...

CVE-2026-92220 vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.requestfinished/MoRIIOConnectorWorker.getfinished/MoRIIOWrapper.handlereleasemessage of the file vllm/distributed/kvtransfer/kvconnector/v1/moriio/moriioconnector.py of the component...

EUVD-2026-80081

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.requestfinished/MoRIIOConnectorWorker.getfinished/MoRIIOWrapper.handlereleasemessage of the file vllm/distributed/kvtransfer/kvconnector/v1/moriio/moriioconnector.py of the component...

CVE-2026-92220

A resource consumption vulnerability in vLLM 0.26.0/0.27.0 affects the MoRIIO Acknowledgement Handler (file moriio_connector.py), specifically the functions MoRIIOConnectorScheduler.request_finished, MoRIIOConnectorWorker.get_finished, and MoRIIOWrapper._handle_release_message. Manipulation of th...

CVE-2026-92220 vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.requestfinished/MoRIIOConnectorWorker.getfinished/MoRIIOWrapper.handlereleasemessage of the file vllm/distributed/kvtransfer/kvconnector/v1/moriio/moriioconnector.py of the component...

lucky13

LUCKY13 漏洞利用 该仓库包含针对 LUCKY13 漏洞（CVE-2013-0169）的概念验证（POC）利用程序，该漏洞是对密码系统中某些 CBC（密码块链接）模式实现的时序攻击。该利用程序旨在通过利用基于填充验证的响应时间差异来解密目标令牌。 前提条件 运行该利用程序前，请确保您已满足以下条件： 您的机器上已安装 Python 3.x。 requests 库。 工作原理 该利用程序通过以下步骤工作： root@kitploit: Creating a Payload: 它生成一个包含已知字节前缀和待测试字节猜测的有效载荷。 Timing the Response: 它将有效载荷...

EUVD-2026-80080

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/webcore/src/v09/processing/message-processor.ts of the component Message Parsing. This manipulation causes dynamically-determined object attributes. The attack can be...