CVE-2026-78199

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the file /fos/view_prod.php . Manipulation of the ID argument allows a remote attacker to execute arbitrary SQL queries without authentication. The impact is rated CVSS 3.1 7.3 (HIGH) w...

CVE-2026-78199 SourceCodester Simple Online Food Ordering System view_prod.php sql injection

A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...

Joomla-CMS-Full-Lifecycle-Pentest

Test di Penetrazione CMS a Ciclo Completo Joomla 4.2.5 📌 Panoramica del Progetto Questo progetto dimostra un test di penetrazione a ciclo di vita completo condotto su un CMS open source Joomla 4.2.5. L'intero test segue metodologie standard OWASP/PTES dalla distribuzione del laboratorio fino allo...

EUVD-2026-64732

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=addtocart. Such manipulation of the argument pid leads to sql injection. The attack may be launched remotely. The...

Metasploit-Red-Pentest-Lab

Metasploit-Red-Pentest-Lab Laborübung zur Ausnutzung der Schwachstelle vsftpd 2.3.4 CVE-2011-2523 auf Metasploitable 2 und den Schritten nach der Kompromittierung...

CVE-2024-13985

CVE-2024-13985 — Esegui codice in remoto su Dahua EIMS tramite capturehandle.action Tipo di advisory: Divulgazione di sicurezza coordinata con il venditore · Sfruttamento attivo segnalato ID CVE: CVE-2024-13985 ID CNVD: CNVD-2024-17054 Venditore: Zhejiang Dahua Technology Co., Ltd. Prodotto: EIMS...

Langflow-cve-2026-33017-exploit

लैंगफ्लो RCE एक्सप्लॉइटेशन फ्रेमवर्क CVE-2026-33017 · लैंगफ्लो रिमोट कोड एक्सिक्यूशन के लिए अधिकृत सुरक्षा परीक्षण अनुसंधान एवं रेड-टीम टूलिंग उन लैंगफ्लो इंस्टेंस के विरुद्ध CVE-2026-33017 को मान्य करने के लिए, जिनका आकलन करने के लिए आप स्पष्ट रूप से अधिकृत हैं। अनधिकृत उपयोग के लिए नहीं। अस्वीक...

Kangaroo

Kangaroo Un exploit che bypassa l'autenticazione sui server telnet che eseguono la versione 2.7 o inferiore. Noto anche come cve-2026-32746 Come difendersi da questo attacco Disattivare Telnet: interrompere e spegnere immediatamente il demone telnetd sui propri server e dispositivi di rete se non...

CVE-2026-78182

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

sh4d0wup

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

CVE-2026-78182 Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System plansImmediate PlanController.getImmediatePlans sql injection

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

EUVD-2026-64709

A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...

CVE-2026-78182

A SQL injection vulnerability in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System (versions up to 300R004C00B300 ) is triggered via the order/sort argument of the PlanController.getImmediatePlans function at /xbreport/api/v1/plamange/plansImmediate. The attack is remote, ...

zygote-CVE-2024-31317

Zygote Toolkit - CVE-2024-31317 Questo è un toolkit che utilizza CVE-2024-31317 per estrarre dati privati delle app tramite ADB o per avviare una shell con l'UID di un'app. Questa vulnerabilità riguarda le versioni di Android dalla 9 alla 14 con livello di patch di sicurezza 2024-06-01 o inferior...

CVE-research

CVE-research Ein Repository, das alle funktionierenden PoCs enthält, die ich für bekannte CVEs erstellt habe, sowie Details zu laufenden Forschungsarbeiten, an denen ich derzeit arbeite hauptsächlich IoT-Geräte Hinweis zu funktionierenden PoC-Exploit-Skripten/Payloads 1. Verwenden Sie die...

CVE-2026-78167

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...

WordPress-CVE-2026-63030-Analysis

🛡️ CVE-2026-63030: Technische Analyse & Audit Umfassende defensive Aufschlüsselung, Bedrohungsanalyse und Richtlinien zur nicht-destruktiven Verifikation. Zusammenfassung • Matrix • Technischer Deep Dive • Verifikation • Behebung 📑 Zusammenfassung !IMPORTANT Nur zu Verteidigungszwecken: Dieses...

EUVD-2026-64691

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

Deep-Reaver

Deep Reaver Deep Reaver è un potente toolkit di valutazione delle vulnerabilità e sfruttamento potenziato dall'IA, costruito in Python. Ispirato a strumenti come Nmap e Nessus, Deep Reaver è progettato per una scansione approfondita e modulare di applicazioni web e servizi. Caratteristiche Analis...

EUVD-2026-64687

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made availab...