CVE-2024-49379

Proof of Concept PoC for CVE-2024-49379 This repository contains a Python-based Proof of Concept PoC for a critical vulnerability identified in UmbrelOS. The vulnerability allows for Cross-Site Scripting XSS, which can escalate to Remote Code Execution RCE under specific conditions. Overview CVE ...

CVE-2025-14598

CVE-2025-14598 CVSS: 9.8 Remote Unauthenticated SQL Injection leading to Remote Code Execution. Executive Summary A SQL Injection vulnerability was identified in the login functionality of BET e-Portal, a software solution widely deployed across educational institutions for student information an...

CVE-2026-41462

🚨 CVE-2026-41462 - ProjeQtor Unauthenticated SQL Injection Critical Unauthenticated SQL Injection in ProjeQtor ≤ 12.4.3 📌 Overview CVE-2026-41462 is a critical unauthenticated SQL Injection vulnerability in the login functionality of the ProjeQtor project management tool. CVE ID : CVE-2026-41462...

CVE-2026-31158-Boolean-Based-SQL-Injection-in-CRM-Login

CVE-2026-31158 Security Advisory: Unauthenticated Boolean-Based SQL Injection in CRM Login Functionality Summary A Boolean-based SQL Injection vulnerability was reported in the login functionality of a CRM web application hosted at crm.softtradeindia.com. Improper handling of user-supplied input ...

CVE-2026-112205

WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the logincount and logintimeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts. This issue has been fixed in...

CVE-2026-112205 Bruteforce Protection Bypass in WidzialniCMS

WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the logincount and logintimeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts. This issue has been fixed in...

EUVD-2026-120047

WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the logincount and logintimeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts. This issue has been fixed in...

CVE-2026-112205

WidzialniCMS is vulnerable to a Bruteforce Protection Bypass in its login functionality. The root cause is that the cookie-based lockout mechanism can be bypassed by an unauthenticated attacker who omits the login_count and login_timeout cookies. This allows the attacker to perform an unlimited n...

CVE-2026-112205: Fundacja Widzialni WidzialniCMS: WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality

WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the logincount and logintimeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts. This issue has been fixed in...

PT-2026-140403

WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login count and login timeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts. This issue has been fixed i...

Exploit for CVE-2026-31158

CVE-2026-31158 Unauthenticated Boolean-Based SQL Injectio...

CVE-2026-43838

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution...

CVE-2026-43838

CVE-2026-43838 identifies a stack-based buffer overflow vulnerability within the login functionality of an unspecified product. This flaw could potentially allow an attacker to achieve code execution . While the vulnerability is classified as CRITICAL with a CVSS 4.0 score of 9.2, the provided do...

CVE-2026-43838

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution...

EUVD-2026-104837

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution...

CVE-2026-43838

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution...

PT-2026-118273

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution...

CVE-2026-33920

A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...

CVE-2026-33920

CVE-2026-33920 affects the login functionality of Nozomi Networks Guardian/CMC (versions before 26.3.0 ). The root cause is a missing validation of the anti-CSRF token in both standard and SAML login flows. An attacker holding a valid account can coerce a victim into unknowingly authenticating wi...

EUVD-2026-72789

A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...