Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

GHSA-G3F9-G5VJ-P62F Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

exploit-cve-2023-36808

CVE-2023-36808 - GLPI Unauthenticated SQL Injection Vulnerability GLPI versions field is injected directly into a SQL query without sanitisation: root@kitploit: SELECT id FROM glpiagents WHERE deviceid = '' No authentication is required. The vulnerability allows full database read access via blin...

aws-recon

AWS Recon A multi-threaded AWS security-focused inventory collection tool written in Ruby. This tool was created to facilitate efficient collection of a large amount of AWS resource attributes and metadata. It aims to collect nearly everything that is relevant to the security configuration and...

PT-2026-90545

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

PT-2026-90525

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

aws-inventory

소개 이 도구는 계정에 생성된 모든 AWS 리소스를 발견하려고 시도합니다. AWS에는 많은 제품일명 서비스이 있으며, 새로운 제품이 지속적으로 추가되고 기존 제품은 새로운 기능으로 확장되고 있습니다. 이러한 생태계를 통해 사용자는 다양한 서비스를 조합하여 맞춤형 클라우드 환경을 구성할 수 있습니다. 대규모로 서비스를 즉시 실행할 수 있는 기능에는 관리 비용이 따릅니다. 사용 중인 리소스에 대해 AWS 계정을 감사하는 것이 빠르게 어려워질 수 있습니다. 이는 청구 목적뿐만 아니라 보안에도 중요합니다. 유휴 리소스와 알 수 없는...

geiger

geiger AI 에이전트를 위한 가이거 계수기. 머신에 있는 모든 AI 에이전트, 하네스, MCP 서버, 플러그인, AI 확장을 인벤토리화하고, 각각이 무엇을 건드릴 수 있는지 평이한 언어로 알려주는 단 하나의 읽기 전용 명령입니다. root@kitploit: npx geiger-scan 설치 없음. 계정 없음. 텔레메트리 없음. 설정과 디렉터리를 읽기만 하고, 아무것도 쓰지 않습니다 --json yourfile.json을 요청하지 않는 한. 왜 이게 필요한가 2026년 8월, 한 오픈소스 에이전트 하네스가 3주 만에...

CVE-2026-11518-XSS

Stored XSS in Inventory System using PHP and MySQL Vulnerability Details...

CVE-2026-76904

GeoServer WFS 인벤토리 및 인가된 검증 이 저장소는 GeoServer WFS 엔드포인트를 조사하기 위한 두 개의 Python 스크립트를 포함합니다. 개요 wfsinventory.py 목적: 레이어, XSD 필드 및 WFS 값을 인벤토리화하고, 선택적으로 시간 기반 검사를 통해 후보를 검증합니다. 실행 예시: root@kitploit: python3 wfsinventory.py --url https://HOST --valid-fields 4 root@kitploit: python3 wfsinventory.py --ur...

EUVD-2026-75219

A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This vulnerability affects the function storeCustomerOrderInvoice of the file includes/manage.php. Performing a manipulation of the argument proname results in sql injection. The...

EUVD-2026-75211

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument...

EUVD-2026-75213

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes/invoicebill.php of the component Invoice Generation. Such manipulation of the argument orderdate/invoiceno leads to...

EUVD-2026-75220

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

EUVD-2026-75189

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function DBOperation.addCategory of the file includes/process.php of the component AJAX Backend. The manipulation of the argument useri...

EUVD-2026-75182

A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...

CVE-2026-87926

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...

CVE-2026-87925

A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This vulnerability affects the function storeCustomerOrderInvoice of the file includes/manage.php. Performing a manipulation of the argument proname results in sql injection. The...

CVE-2026-87926

CVE-2026-87926 affects the Rizwan17 inventory-management-system (GitHub project), up to commit bfe78a330d01bb26b9daec5dc9ecd5c77900e03f . The vulnerability is a cross-site scripting (XSS) flaw in the Login Page component, specifically in the file index.php . Manipulation of the msg argument allow...

CVE-2026-87924

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes/invoicebill.php of the component Invoice Generation. Such manipulation of the argument orderdate/invoiceno leads to...