CVE-2025-49113

CVE-2025-49113 – Roundcube Webmail RCE Exploit Python PoC CVE ID: CVE-2025-49113 Exploit Type: Remote Code Execution via PHP Object Injection Application: Roundcube Webmail ≤ 1.5.9 and ≤ 1.6.10 Exploit Language: Python Author: 00xCanelo Status: Tested and Working on Vulnerable Roundcube...

CVE-2026-82696

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to t...

CVE-2026-82692

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsimgr.cgi. Performing a manipulation of the argument alias/username/password/volumelocation results in os command injection. It is possible to initiate the attack remotely...

CVE-2026-5956

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Ankara Hosting Site Management Panel allows SQL Injection. This issue affects Site Management Panel: through 15062026...

CVE-2026-12894

A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails. The issue exists in the component responsible for looking up data values ReflectionValueResolver, which fails to properly block access to sensitive Java internal functions...

CVE-2024-4577-EXPLOIT

CVE-2024-4577 - PHP CGI तर्क इंजेक्शन रिमोट कोड निष्पादन RCE PHP के कुछ संस्करणों 8.1. 8.1.29 से पहले, 8.2. 8.2.20 से पहले, और 8.3. 8.3.8 से पहले में, विंडोज़ पर Apache और PHP-CGI के साथ PHP का उपयोग करते समय एक गंभीर कमज़ोरी मौजूद है। यदि सिस्टम विशिष्ट कोड पेजों का उपयोग करने के लिए कॉन्फ़िगर...

Cisco-UCM-SQLi-Scripts

Scripts SQLi Cisco UCM CVE-2019-15972 Scripts pouvant être utilisés pour exploiter CVE-2019-15972, qui était un problème de SQLi authentifié dans Cisco Unified Call Manager UCM. Énumérer les tables - énumère toutes les tables de la base de données sous-jacente et place les noms des tables dans un...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 est une attaque par faute contrôlée par logiciel sur les processeurs x86. C'est la première attaque corrompant l'intégrité des enclaves SGX. Description Tous les processeurs Intel récents présentent une interface logicielle pour contrôler les tensions du cœur sans...

USN-8704-1 cpio vulnerabilities

It was discovered that cpio incorrectly sanitized hard-link targets when extracting tar archives in copy-in mode. If a user or automated system were tricked into extracting a specially crafted tar archive, an attacker could possibly use this issue to create hard links to files outside the...

CVE-2025-63943

CVE-2025-63943 — ثغرة حقن SQL في نظام إدارة متجر البقالة 1.0 نظرة عامة تم تحديد ثغرة حقن SQL عالية الخطورة في مكوّن searchproducts.php من Grocery Store Management System 1.0 ، وهو تطبيق ويب مبني على PHP/MySQL من إنشاء anirudhkannan. تنشأ المشكلة من عدم التحقق السليم من المدخلات والبناء غير الآمن...

MetabaseRceTools

أدوات MetabaseRceTools CVE-2023-38646 أداة Metabase RCE أداة واجهة رسومية لاستغلال CVE-2023-38646 RCE وحدة التحقق أدخل الرابط المحدد للكشف عن الرمز المميز Token غير المصرح به تنفيذ الأوامر تتطلب هذه الوحدة أولاً تشغيل وحدة التحقق للحصول على الرمز المميز قبل الاستخدام JarLocation: موقع ملف...

CVE-2024-41997

ثغرة تنفيذ الأوامر في Warp Terminal CVE-2024-41997 حقن أوامر عبر معالج مخطط URI warp:// غير معقم. الشرح الكامل على 0day.gg. ملخص...

CVE-2017-1000117

CVE-2017-1000117 يمكن استخدام هذه الوحدة لاختبار ما إذا كنت عرضة لـ CVE-2017-1000117 root@kitploit: git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 المخرجات إذا كنت عرضة: root@kitploit: $ git clone https://github.com/timwr/CVE-2017-1000117.git...

CVE-2019-11043

CVE-2019-11043 0th3rs Security Team ====================== In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 Tested under PHP 7.2.20/7.3.10 Instructions root@kitploit: 1、较为稳定,只要爆破出query长度和Header头字段长度 2、autosession检测漏洞存在性 3、实现判断目标worker进程数实现健壮性 4、全worker进程污染 Nginx...

CVE-2026-82696 itsourcecode Sales and Inventory System inv_searchfrm.php sql injection

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to t...

EUVD-2026-68510

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to t...

CVE-2026-82696

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/inv_searchfrm.php. The vulnerability is triggered by manipulating the ID argument and can be exploited remotely with low privileges (no user interaction required). The exploit is described ...

CVE-2026-5956

Ankara Hosting Site Management Panel is affected by a SQL injection vulnerability caused by improper neutralization of special elements used in an SQL command. The issue affects versions through 15062026 . The assigned CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:...

EUVD-2026-68508

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Ankara Hosting Site Management Panel allows SQL Injection. This issue affects Site Management Panel: through 15062026...

CVE-2026-5956 SQLi in Ankara Hosting's Site Management Panel

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Ankara Hosting Site Management Panel allows SQL Injection. This issue affects Site Management Panel: through 15062026...