1270 matches found
CVE-2026-89179
WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected...
EUVD-2026-76006
WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected...
CVE-2026-89179 Howyar|WeenyGenius - Missing Support for Integrity Check
WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected...
CVE-2026-89179
WeenyGenius , a computer lab management system by Howyar Technologies , is affected by a Missing Support for Integrity Check vulnerability. An unauthenticated attacker on the same (adjacent) network can intercept a student's connection packet and replay it, forging the appearance that the student...
collision-webshell
Webshell 碰撞 此仓库包含 2 个具有相同 MD5 哈希的文件: webshell.php normal.php 文件的 MD5: root@kitploit: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php webshell.php 的 Hexdump: root@kitploit: $ hexdump -C webshell.php 00000000 3c 3f 3d 65 76 61 6c 28 24 5f 47 4...
CVE-2019-13496
CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity check Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali Linux , Windows 7 ,Ubantu 16.04 To...
CVE-2023-33668
CVE-2023-33668 摘要 DigiExam 是一款(监控 )考试与监考软件。该软件安装在学校(或学生)的计算机上。当学生加入考试时,DigiExam 将:确保未在虚拟机中运行,终止所有应用程序,全屏显示自身,并阻止用户离开 DigiExam 窗口。 已发现其安全检测机制薄弱,只需替换文件系统中用户拥有的一个文件即可轻松绕过。已确认在 DigiExam v14.0.2 上有效,此后未再测试(我通过了考试 :)。 漏洞:DigiExam(一款 Electron 应用)将虚拟机检测(以及大部分安全功能)"外包"给一个名为 dx-sec 的原生模块。由于缺少对 dx-sec...
CVE-2026-81049
Dell ThinOS 10, versions prior to 260510.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2026-81052
Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2026-81049
Dell ThinOS 10, versions prior to 260510.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...
EUVD-2026-75566
Dell ThinOS 10, versions prior to 260510.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2026-81049
Dell ThinOS 10 , in versions prior to 2605_10.2616 , is affected by a Missing Support for Integrity Check vulnerability. A high-privileged attacker with local access can potentially exploit this flaw to achieve arbitrary code execution . The CVSS 3.1 score is 4.4 (MEDIUM) , with the primary impac...
CVE-2026-81052
Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2026-81052
Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this flaw to achieve arbitrary code execution , resulting in high impact to confidentiality, integr...
EUVD-2026-75560
Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...
meesho-android-improper-encryption-cve-2026-5682
🔐 概念验证:Meesho 安卓应用 – 不安全的加密实现(AES-CBC 无完整性保护 + 弱密钥派生) 作者: Soyam Arya(又名 honestcorrupt) 发现日期: 2026 年 3 月 受影响应用: Meesho 安卓应用(com.meesho.supply) 状态: 验证中 类别: 加密不足 / 数据完整性失败 🎯 摘要 本报告记录了 Meesho 安卓应用中的一个加密漏洞,该应用使用 AES/CBC/PKCS5Padding 加密敏感数据,但未提供完整性保护,且加密密钥通过不安全的 MD5 哈希算法 派生。 该应用以如下格式构造加密载荷:...
CVE-2026-79963
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command executi...
EUVD-2026-74826
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command executi...
CVE-2026-79963
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command executi...
CVE-2026-79963
Dell Secure Connect Gateway 5.0 (SCG) is affected by a Download of Code Without Integrity Check vulnerability. The issue affects Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . An unauthenticated attacker with remote network access could exploit this to achie...