CVE-2026-78248 SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection

A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=savesettings. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit...

EUVD-2026-64842

A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=savesettings. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit...

cve-2018-8611

Exploit d'élévation de privilèges CVE-2018-8611 KTM UAF Ceci est mon exploit PoC d'élévation de privilèges pour CVE-2018-8611, J'ai écrit cet exploit en étudiant le cours ost2 d'exploitation du noyau Windows J'ai vraiment apprécié le cours et la manière dont il adopte une approche étape par étape...

vex8s

Vex8s هذا الشعار ليس من إنشاء الذكاء الاصطناعي يقوم Vex8s بإنشاء مستندات VEX من خلال الربط بين ثغرات الحاويات وإعدادات Kubernetes لتحديد أي من CVEs يمكن استغلالها فعليًا في مجموعتك. يرجى ملاحظة أن هذا مشروع تجريبي. قد تتغير الأمور بسرعة. كيف يعمل يهدف المشروع إلى تقييم قابلية استغلال CVEs المعروف...

Apache-Struts-Shodan-Exploit

PREUVE DE CONCEPT D'EXPLOITATION SHODAN POUR APACHE STRUTS Auteur : @037 Le code original peut être trouvé ici. Cet outil exploite CVE-2018-11776 et Shodan pour effectuer une exploitation massive des serveurs Apache Struts vérifiés et vulnérables. Le paramètre de recherche Shodan a été omis pour...

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

follina-msdt-threat-investigation

Follina — Analyse de la menace CVE-2022-30190 Exécution de code à distance zero-day dans Microsoft MSDT — enquête sur une exploitation active par MUHAMMAD ZAWAR KHATTAK 🔗 Voir le rapport complet → 🧪 Scénario Un vendredi soir, l'équipe a été alertée d'une nouvelle vulnérabilité RCE activement...

gtfobins-cli

🚀 GTFOBins CLI Aperçu GTFOBins CLI est une interface en ligne de commande pour GTFOBins, offrant un accès instantané aux techniques d'exploitation des binaires Unix. Cet outil aide les professionnels de la sécurité et les administrateurs systèmes à identifier et comprendre comment des binaires Un...

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78246

A SQL injection vulnerability exists in itsourcecode Online Clinic Management System 1.0 , specifically in the Admin Login component (file success/login.php). The root cause is the unsanitized handling of the Username argument, allowing an unauthenticated remote attacker to inject arbitrary SQL. ...

CVE-2026-78246 itsourcecode Online Clinic Management System Admin Login login.php sql injection

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

getSPNless

getSPNless Outil Python pour obtenir des tickets de service Kerberos en utilisant la technique SPN-less. Basé sur Exploiting RBCD Using a Normal User Account. Cet outil utilise le projet impacket. Installation Ces outils sont uniquement compatibles avec Python 3.5+. Clonez le dépôt depuis GitHub,...

CVE-2024-57778

CVE-2024-57778 Описание : Проблема в Orbe ONetView Roteador Onet-1200 позволяет удалённому злоумышленнику повышать привилегии через ответ сервера, изменяя код статуса с 500 на 200. Версии : Обнаружено в Orbe ONetView Roteador Onet-1200 Orbe 1680210096, но применимо ко всем версиям до указанной...

CVE-2026-78245

itsourcecode Online Pharmacy System 1.0 is affected by an unrestricted file upload vulnerability in the User Registration component. The flaw resides in the move_uploaded_file function within all_users/register.php, where manipulation of the photo argument allows a remote, unauthenticated attacke...

Eden-RAT

Eden-RAT خلفية أثناء تطوير EgoDrop و DuplexSpy، نجحت في تنفيذ شل تفاعلي داخل تطبيق واجهة رسومية قائم على C. ثم تذكرت أحد مشاريعي السابقة التي تم تعليقها بسبب محدودية خبرتي التطويرية في ذلك الوقت. لذلك، قررت العودة إليه وإكماله. نشأت فكرة هذا المشروع عندما كنت أتعلم اختبار الاختراق عبر الويب. عند...

CVE-2026-50522

🛡️ CVE-2026-50522 — Enquête sur le RCE de Microsoft SharePoint Vulnérabilité critique de désérialisation SharePoint activement exploitée Créé par Pratik Chhetri Date du rapport : 2026-07-27 📌 Synthèse exécutive...

mose

MOSE Master Of SErvers...

cve-2025-53770

CVE-2025-53770: إثبات مفهوم تنفيذ الأوامر عن بُعد عبر إلغاء التسلسل في SharePoint حرج — تنفيذ أوامر عن بُعد بدون مصادقة عبر إلغاء تسلسل غير آمن في خادم Microsoft SharePoint CVE-2025-53770 الوصف يسمح إلغاء تسلسل البيانات غير الموثوقة في خادم Microsoft SharePoint المحلي للمهاجم بتنفيذ الأكواد عن بُ...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...