CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

EUVD-2026-66115

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2026-79793

code-projects Online Shopping System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /admin/sumit_form.php , caused by insufficient input validation on the Success argument. The attack is remote and requires user interaction , but no authentication is needed. Impact is r...

CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2025-55182

CVE-2025-55182 Scanner e Laboratorio di Exploit Questo repository contiene uno scanner completo e uno strumento di exploit per CVE-2025-55182 , una vulnerabilità critica di Remote Code Execution RCE nei React Server Components RSC. Include inoltre un realistico "Ambiente di Laboratorio" per testa...

Exploit for CVE-2026-56705

CVE-2026-56705: Adminer dsn"sqlsrv:Server=$host" . $port ? "...

Santoku-Linux

Mobile Forensik, Malware-Analyse und App-Sicherheitstests ZERLEGEN UND ANALYSIEREN Booten Sie in Santoku und machen Sie sich an die Arbeit, mit den neuesten Sicherheitstools und Dienstprogrammen, die sich auf mobile Plattformen wie Android und iOS konzentrieren. Santoku Linux ist eine bootfähige...

Mass-exploit-CVE-2022-29464

Miau Miau Miau! Nur ein Massenexploit basierend auf einem Python PoC für WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE-Fehler CVE-2022-29464. Miau Miau Miau? Anforderungen? Python3 Shodan Zoomeye Ein Gehirn Was ist dieses Tool? Dies ist ein Massen-Autoscan-Exploit für CVE-2022-29464 basierend au...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - Reflektierte XSS-Schwachstelle in HotelDruid 3.0.7 Beschreibung Eine Cross-Site-Scripting-Schwachstelle in DigitalDruid HotelDruid v.3.0.7 ermöglicht es einem Angreifer, beliebigen Code auszuführen und vertrauliche Informationen über den Parameter ripristinabackup im Endpunkt...

evilqr

Evil QR Toolkit que demonstra uma outra abordagem do ataque QRLJacking, permitindo realizar a tomada de conta remota, através de phishing de código QR de login. Ele consiste em uma extensão de navegador usada pelo atacante para extrair o código QR de login e um aplicativo servidor, que recupera o...

CVE-2024-32030-Nuclei-Template

Template Nuclei per CVE-2024-32030 Descrizione Questo repository contiene un template Nuclei per rilevare la vulnerabilità CVE-2024-32030. Tale vulnerabilità consente l'esecuzione remota di codice tramite risoluzione JNDI nella raccolta metriche JMX. Dettagli della vulnerabilità ID: CVE-2024-3203...

browser-backdoor

BrowserBackdoor...

CVE-2025-55182

CVE-2025-55182 Next.js RCE-Ausnutzungstool 🚀 Dies ist ein automatisiertes Proof-of-Concept PoC Tool für die Remote Code Execution RCE Schwachstelle Next.js React Server Components CVE-2025-55182. Das Tool integriert eine interaktive Shell , intelligente Protokollerfassung und mehrthreading...

gsscred-move-uaf

GSSCred-move-uaf Der XPC-Dienst com.apple.GSSCred, der auf macOS und iOS mit Root-Rechten läuft, implementiert den "move"-Befehl nicht ordnungsgemäß, was zu einer Use-after-Free-Bedingung in der Funktion doMove führt. Der GSSCred-Dienst kann aus der standardmäßigen Anwendungs-Sandbox auf iOS...

beyondtrust-cve-2026-1232

🔍 Schwachstellenforschung Eine kuratierte Sammlung detaillierter Schwachstellenanalysen zu realen Sicherheitsvorfällen im Software-Ökosystem. Jeder Eintrag enthält eine vollständige technische Analyse, Proof-of-Concept, IOC-Liste und Hinweise zur Behebung. Zweck: Bildungsressource und Portfolio...

CVE-2020-27955

CVE-2020-27955 Danke https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

golddigger

Gold Digger Cerca file per oro Gold Digger è un semplice strumento utilizzato per aiutare a scoprire rapidamente informazioni sensibili nei file in modo ricorsivo. Originariamente scritto per assistere nella ricerca rapida di file ottenuti durante un penetration test. Installazione Gold Digger...

DEBIAN-CVE-2026-63072

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...

DEBIAN-CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

DEBIAN-CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...