835853 matches found
CVE-2026-86282
A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument...
CVE-2026-86281
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public...
CVE-2026-86280
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...
AZL-99972 CVE-2026-78254 affecting package ant 1.10.14-1
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
DEBIAN-CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-78254
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
CVE-2026-86285 BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control
A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper acces...
CVE-2026-86285
BookStack versions up to 26.05.2 are affected by an improper access control vulnerability in the Attachment Edit Endpoint , specifically the AttachmentController::getUpdateForm function in app/Uploads/Controllers/AttachmentController.php. The ID argument can be manipulated to bypass permission ch...
EUVD-2026-72301
A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper acces...
CVE-2026-86285 BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control
A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper acces...
CVE-2026-23111-nftables-lab
CVE-2026-23111 nftables LPE: ้ฒๅบใใงใใฏใจๅฎๅ จใชใฉใ ้ฒๅพกใใผใซ็พคใจใCVE-2026-23111๏ผLinuxใซใผใใซใซใใใ nftables ใฎ Use-After-Free ใซใใใญใผใซใซๆจฉ้ๆๆ ผ่ๅผฑๆงใnftmapcatchallactivate ใซใใใ่ฆ็ด ใขใฏใใฃใใใฃใใงใใฏใฎๅ่ปขใใคใพใ "off by !" ใใฐ๏ผใฎใใใฎๅ็พๅฏ่ฝใชไปฎๆณใใทใณ ใฉใใงใใ็นๆจฉใฎใชใใญใผใซใซใฆใผใถใผใใ้็นๆจฉใฆใผใถใผใใผใ ในใใผในใ้ใใฆ root ใซๆๆ ผใใใณใณใใใใ่ฑๅบใงใใพใใ ใใฎใชใใธใใชใซใฏใจใฏในใใญใคใใฏๅซใพใใฆใใพใใ...
CVE-2025-31133
CVE-2025-31133 PoC ๅฉ็จ ๆฌๆๆกฃ่ฏดๆๆๆไพ็ runc ๆผๆด CVE-2025-31133 ็ Proof-of-Concept PoC ่ๆฌ็ๅ่ฝใ ๆ่ฆ ๆผๆด๏ผ CVE-2025-31133 - runc ไธญ maskedPaths ๅค็็ไธไธช็ฌฆๅท้พๆฅๆกไปถ็ซไบๆผๆดใ ๅฝฑๅ๏ผ ๆถๆๅฎนๅจๅฏไปฅ็ป่ฟ maskedPaths ็ไฟๆค๏ผไป่ๅ ่ฎธๅๅ ฅๅฎฟไธปๆบไธ็ๆๆๆไปถใ่ฟๆๆไบไธๆฌกๅฎนๅจ้้ธ ใ PoC ็ฎๆ ๏ผ ๅฎๅ จๅฐๆผ็คบๆผๆด๏ผไปๅฎนๅจๅ ้จไฟฎๆนๅฎฟไธปๆบ็ /proc/sys/kernel/corepattern ๆไปถใ ๅฎๅ จๆง๏ผ ๆญค PoC ๆฏ้็ ดๅๆง็ใๅฎไป ๅ็ฎๆ ๆไปถๅๅ ฅๅญ็ฌฆไธฒ...
cve-2021-4034-mock
CVE-2021-4034 PwnKit ๆจกๆฌ่ๅผฑๆงใทในใใ ใใฎใใญใธใงใฏใใฏใLinux pkexec ใใผใขใณใง็บ็ใใ CVE-2021-4034 Out-of-Bounds Read/Write ่ๅผฑๆงใฎๆ ธๅฟ็ใชๅไฝๅ็ใๅ็พใใๆจกๆฌใทในใใ ใงใใๅฎ้ใฎSUIDๆจฉ้ๆๆ ผใชใใซใๅถๅพกใใใ็ฐๅขๅ ใง็ฐๅขๅคๆฐใกใขใช้ ๅใฎไพตๅฎณๅใณๆชๆใฎใใใใคใญใผใๆณจๅ ฅใกใซใใบใ ใๅฎๅ จใซใทใใฅใฌใผใใใพใใ...
CVE-2026-86284
CVE-2026-86284 affects jaychouchannel Tourism-Management-System (a Java-based project hosted on GitHub). The vulnerable component is the getOption function in CommonController.java , where unsanitized tableName/columnName arguments enable remote, unauthenticated information disclosure (CVSS 3.1: ...
CVE-2026-86284 jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure
A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...
EUVD-2026-72298
A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...
CVE-2026-86284 jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure
A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...
Exploit for Use After Free in Linux Linux_Kernel
Galaxy A37 Root โ CVE-2026-43499 Native payload for the Sam...
CVE-2023-50164-PoC
CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...
React2Hell
๐งจ React2Hell โ CVE-2025-55182 ใจใฏในใใญใคใ ๐ฅ Next.js / React Server ใชใขใผใใณใผใๅฎ่ก RCE ใจใฏในใใญใคใ root@kitploit: โโโโโโ โโโโโ โโโ โโโโ โโโโโโ โโโโโ โโ โโ โโโโโ โโ โโ โโโโโโโ โโโโ โโโโโ โโโโโ โโ โโโโ โโโโโโ โโโโ โโ โโ โโ โโ โโโโโ โโโโโ โโโโโ โโ โโโโโ โโ โโ โโโโโ โโโโโ โโโโโ Next.js/React Server RCE Exploit โ...