CVE-2018-7600

POC of CVE-2018-7600 Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which...

CVE-2026-86210

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteuseraccount.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The...

CVE-2026-86211 rabindralamsal inventory-management-system Login index.php sql injection

A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of the argument username/password can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-86211 rabindralamsal inventory-management-system Login index.php sql injection

A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of the argument username/password can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-86211

CVE-2026-86211 affects rabindralamsal inventory-management-system version 1.0.0 , specifically the Login component in index.php . A SQL injection vulnerability exists through manipulation of the username/password arguments, allowing a remote attacker to execute crafted queries. The CVSS 3.1 base ...

EUVD-2026-72101

A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of the argument username/password can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2017-11499

Vulnerabilidades de seguridad específicas de Node.js Semillas constantes de tabla hash CVE-2017-11499 Node.js era susceptible a ataques remotos de denegación de servicio por inundación de hash porque la semilla de la tabla hash era constante en una versión publicada de Node.js. Esto fue el...

CVE-2025-44136

CVE-2025-44136 Unauthenticated XSS in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to...

cve-2018-15473

CVE-2018-15473: OpenSSH Username Enumeration OpenSSH through 7.7 allows remote attackers to enumerate valid usernames by sending malformed authentication requests and observing differential server responses. Details Field| Value ---|--- Affected Software| OpenSSH 2.3 through 7.7 CVSS v3.1| 5.3...

EUVD-2026-72093

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteuseraccount.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The...

CVE-2026-86210 SourceCodester Class and Exam Timetabling System delete_user_account.php sql injection

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteuseraccount.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The...

CVE-2026-86210

A SQL injection vulnerability exists in SourceCodester Class and Exam Timetabling System 1.0 , specifically in the ID argument of the file /delete_user_account.php. The flaw allows remote, unauthenticated attackers to manipulate the ID parameter and execute arbitrary SQL, resulting in low impact ...

CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — Escalada de Privilegios sin Autenticación Automatización de Explotación en 8 Fases | Multiprocessing + Asyncio | Creación de Admin Verificada 🎯 Acerca de la Vulnerabilidad El plugin de WordPress WP Maps Pro versión ≤ 6.1.0 tiene una vulnerabilidad de escalada...

CVE-2025-6254

CVE-2025-6254 python exploit.py -u http://localhost:8080 python exploit.py -f targets.txt -T 50 -t 8 python exploit.py -f targets.txt -o sonuclar.txt --role editor CVE-2025-6254 - Doctreat Core = 1.6.8 Unauthenticated Privilege Escalation SADECE KENDİ TEST ORTAMINIZDA KULLANIN...

cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

CVE-2026-39031: Lansweeper lsrunase 2.0 / lsencrypt 2.0 Password Recovery Summary Lansweeper lsrunase 2.0 and lsencrypt 2.0 use a reversible password encryption scheme based on RC4. The RC4 key is derived from an 8-character prefix that is stored in cleartext with the encrypted password and fixed...

CVE-2025-63666

CVE-2025-63666 — Tenda AC15 Resumen El firmware Tenda AC15 V15.03.05.18multi emite una cookie de autenticación en la forma password= y la devuelve sin los indicadores HttpOnly, Secure o SameSite, exponiendo el hash de la contraseña al cliente. El sufijo de baja entropía actúa como un identificado...

CVE-2025-14440

CVE-2025-14440 JAY Login & Register = 2.4.01 - Authentication Bypass via Cookie 🚨 JAY Login & Register = 2.4.01 - Authentication Bypass via Cookie 📝 Description The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to and including 2.4.01. This flaw...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...