1905958 matches found
Exploit for CVE-2026-103355
CVE-2026-103355 - Unlimited Elements For Elementor Blind SQL I...
Exploit for CVE-2026-104991
CVE-2026-104991 — Missing Authorization BOLA/IDOR in Phproje...
CVE-2026-105149
A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...
CVE-2026-105158 RainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...
CVE-2026-105158 RainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...
EUVD-2026-92109
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...
Exploit for CVE-2026-96451
CVE-2026-96451 WordPress Ultimate Member plugin = 2.13.1 -...
CVE-2026-105157 RainyGao DocSys Document Controller doGetTmpFile.do DocController.doGetTmp path traversal
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGetTmpFile.do of the component Document Controller. The manipulation of the argument path/fileName leads to path traversal. Remote exploitati...
EUVD-2026-92097
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGetTmpFile.do of the component Document Controller. The manipulation of the argument path/fileName leads to path traversal. Remote exploitati...
CVE-2026-105157 RainyGao DocSys Document Controller doGetTmpFile.do DocController.doGetTmp path traversal
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGetTmpFile.do of the component Document Controller. The manipulation of the argument path/fileName leads to path traversal. Remote exploitati...
The vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue faces unlimited distribution of resources, allowing attackers to compromise the accessibility of protected information.
The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
CVE-2026-105149 mooSocial all-products sql injection
A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...
EUVD-2026-92095
A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...
CVE-2026-105149
A security flaw exists in mooSocial versions up to 3.2.4 due to improper processing of the /stores/all-products file. An attacker can perform a remote SQL injection by manipulating the rating argument. Public exploit code is available for this vulnerability. The vendor has not responded to disclo...
CVE-2026-97307
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...
CVE-2026-105146
A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...
libretto
Libretto Libretto es un conjunto de herramientas para construir integraciones web robustas. Le proporciona a tu agente de codificación un navegador en vivo y una CLI eficiente en tokens para: Inspeccionar páginas en vivo con mínimo overhead de contexto Capturar tráfico de red para realizar...
DevGuide
OWASP 基金会开发者指南 开发者指南是 OWASP 的原始文档之一，因此有着悠久的历史。 原始的 DevGuide 仓库包含许多旧版本，最早可追溯到 2002 年发布的1.0 首个版本。 这是开发者指南文档的内容，即 DevGuide 仓库；本指南的最新版本可在网页文档中访问。 OWASP 开发者指南项目页面的内容位于其独立的仓库中。 OWASP 有一期关于 OWASP 开发者指南的历史 的播客，其中讨论了该项目的过去与未来。 贡献 欢迎为开发者指南提供贡献和建议；请从阅读贡献指南开始，并遵守贡献者行为准则。 如需对这些页面做出其他贡献，请创建 issue 或发起拉取请求。...
amla-sandbox
amla-sandbox 本仓库是 amla-sandbox Python 包的发布源。开发在 amlalabs 单体仓库 中进行；此仓库会在发布时更新。编译为 amlasandbox.wasm 的 Rust 运行时位于 amla-sandbox-core；此 Python 包所构建的精确发布标签记录在 .mirror-deps.json 中。 amla-sandbox 是一个具有能力强制机制的 WASM 沙箱，用于 AI 智能体代码。智能体只能调用你明确提供的工具，并受你定义的约束限制。提供沙箱化的虚拟文件系统。无网络。无 shell 逃逸。 安装 pip install...
WantasticCore
Wantastic 一个自托管的 WireGuard 网状网络，带浏览器管理门户，全部集成在一个容器中。 试用演示 → · 加入 Discord → 为什么选择 Wantastic overlay-VPN 领域已经很拥挤——Tailscale、Headscale、NetBird、wg-easy。它们都止步于“你的设备可以互相访问”。而 Wantastic 继续前行。 1. 你可以在浏览器中真正 操作 设备。 没有任何其他自托管 overlay 方案提供： 带凭据重新加密的 Winbox 代理 —— 在浏览器中管理 MikroTik 路由器。真实设备密码永远不会离开服务器（中间通过...