CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation

Subrion CMS Reflected XSS v4.2.1 Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and...

CVE-2026-111871

A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is an unknown function of the file qsdb/usersdb/brandb/topicsdb/subjectsdb.php. Executing a manipulation of the argument query/qtype/sortname/sortorder c...

CVE-2026-111872

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::valid/MySQLDB::getresults/MySQLDB::noresults/MySQLDB::getExams/MySQLDB::latestExamID/MySQLDB::getreport of the file...

CVE-2026-111873

The itsmeravitejak Online-Examination-System contains a SQL injection vulnerability within the AJAX Endpoint component. Specifically, the MySQLDB::topicslist function in the exammanger.php file fails to properly neutralize the subject argument, allowing for remote exploitation. While the product ...

EUVD-2026-103384

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::topicslist of the file exammanger.php of the component AJAX Endpoint. The manipulation of the argument subject results in sql injection. The...

CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX

FreePBX CVE-2025 Vulnerability Scanner ⚠️ DISCLAIMER FOR EDUCATIONAL AND AUTHORIZED TESTING ONLY This tool is provided "AS IS" for educational and research purposes only Authors are NOT responsible for any misuse or illegal activities Unauthorized access to computer systems is ILLEGAL Only use on...

Gu3ssWeak

Gu3ssWeak A deliberately vulnerable Android application for mobile security research, bug bounty practice, and CTF-style learning. Contains 21 documented vulnerabilities mapped to the OWASP Mobile Top 10. Quick Start git clone [email protected]:b4sith-sec/Gu3ssWeak.git cd Gu3ssWeak ./gradlew...

CVE-2026-49098

CVE-2026-49098 — camel-kafka kafka.OVERRIDETOPIC Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus...

CVE-2023-43346-Quick-CMS-Stored-XSS---Languages-Backend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Backend - Dashboard in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2021-42668

cve-2021-42668 CVE-2021-42668 - SQL Injection vulnerability in the Engineers online portal system. Technical description: An SQL Injection vulnerability exists in the Engineers Online Portal. An attacker can leverage the vulnerable "id" parameter in the "myclassmates.php" web page in order to...

EUVD-2026-103383

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::valid/MySQLDB::getresults/MySQLDB::noresults/MySQLDB::getExams/MySQLDB::latestExamID/MySQLDB::getreport of the file...

CVE-2026-111872

The itsmeravitejak Online-Examination-System (up to commit e6208e630b14657999bbfe4c9912302d2a1e2449) is vulnerable to a SQL injection vulnerability. The flaw exists in the results.php/include/database.php file, specifically affecting functions including MySQLDB::valid, MySQLDB::getresults, MySQLD...

CVE-2026-111872 itsmeravitejak Online-Examination-System database.php getreport sql injection

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::valid/MySQLDB::getresults/MySQLDB::noresults/MySQLDB::getExams/MySQLDB::latestExamID/MySQLDB::getreport of the file...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Doctreat Core versions = 1.6.8 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated attackers t...

CVE-2025-11077

CVE-2025-11077 - SQL Injection Author: Byte Reaper Description This vulnerability is a Blind SQL Injection in the addcontent.php file of the Online Learning Management System CVE-2025-11077, allowing an attacker to extract database information by sending crafted POST requests. Requirements : Linu...

CVE-2026-111871

A SQL injection vulnerability exists in the itsmeravitejak Online-Examination-System (commit up to e6208e630b14657999bbfe4c9912302d2a1e2449) within an unknown function of the file qsdb/usersdb/brandb/topicsdb/subjectsdb.php. Attackers can perform a remote attack by manipulating the query/qtype/so...

CVE-2026-111871 itsmeravitejak Online-Examination-System subjectsdb.php sql injection

A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is an unknown function of the file qsdb/usersdb/brandb/topicsdb/subjectsdb.php. Executing a manipulation of the argument query/qtype/sortname/sortorder c...

CVE-2026-111871 itsmeravitejak Online-Examination-System subjectsdb.php sql injection

A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is an unknown function of the file qsdb/usersdb/brandb/topicsdb/subjectsdb.php. Executing a manipulation of the argument query/qtype/sortname/sortorder c...

EUVD-2026-103382

A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is an unknown function of the file qsdb/usersdb/brandb/topicsdb/subjectsdb.php. Executing a manipulation of the argument query/qtype/sortname/sortorder c...

CVE-2024-51482

CVE-2024-51482 — ZoneMinder Time-Based Blind SQL Injection A proof-of-concept exploit for CVE-2024-51482 , an authenticated time-based blind SQL injection vulnerability in ZoneMinder v1.37. ≤ 1.37.64. The script extracts usernames and password hashes from the zm.Users table using binary search...