CVE-2025-63298

CVE-2025-63298 A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/managewebsite.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 漏洞名称：车辆服务管理系统 - '多处'文件上传导致代码执行 漏洞作者：SANU P.L CVE：CVE-2021-46076 CVSS：8.8 高危 参考链接： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution https://nvd.nist.gov/vuln/detail/CVE-2021-46076 https://vulners.com/cve/CVE-2021-46076 描述：...

CVE-2024-33911

The School Management 10.3.4 - 認証後SQLインジェクション エクスプロイトタイトル: The School Management 10.3.4 - 認証後SQLインジェクション 日付: 2024年4月29日 エクスプロイト作者: Ivan Spiridonov xbz0n ベンダーホームページ: https://theschool-management.com バージョン: 10.3.4 テスト環境: Ubuntu 22.04 CVE: CVE-2024-33911 脆弱性 The School...

EUVD-2026-74548

Tanium addressed an improper access controls vulnerability in Comply...

fortios-auth-bypass-check-CVE-2024-55591

CVE-2024-55591 Fortinet FortiOS 認証バイパスの脆弱性動作検出 動作中の検出 root@kitploit: python CVE-2024-55591-check.py --target 192.168.1.10 --port 443 / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ / / | | \ \| Y | | \ / | | \ // || \\ ||| | \ / \// || \ \ \ CVE-2024-55591.py Fortinet FortiOS...

CVE-2026-87037 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2024-51030

CVE-2024-51030 説明 Sourcecodester Cab Management System 1.0 の manageclient.php および viewcab.php における SQL インジェクションの脆弱性により、リモートの攻撃者が id パラメータを介して任意の SQL コマンドを実行でき、不正アクセスやデータベース内の機密データが侵害される可能性があります。 脆弱性の種類 SQL インジェクション 製品のベンダー Sourcecodester 影響を受ける製品コードベース:...

CVE-2024-51031

CVE-2024-51031 描述 Sourcecodester Cab Management System 1.0 的 manageaccount.php 中存在跨站脚本XSS漏洞，允许远程认证用户通过“名字”、“中间名”和“姓氏”字段注入任意Web脚本。 漏洞类型 跨站脚本攻击 XSS 供应商 Sourcecodester 受影响产品代码库： https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html - 1.0 受影响组件： Sourcecodester Ca...

CVE-2020-24028

CVE-2020-24028 描述 ForLogic Qualiex v1 和 v3 允许任何经过身份验证的客户通过创建用户、更改密码或更新用户权限来实现权限提升。 重要日期 通知供应商：2020-07-12 公开披露日期：2020-08-31 漏洞类型 不安全的权限配置 供应商 ForLogic 受影响的产品代码库 Qualiex - v1 Qualiex - v3 同一系列的其他版本也可能受影响（尚未测试） 受影响组件 Qualiex 攻击类型 远程 影响权限提升 是 影响信息泄露 是 攻击向量 经过身份验证的权限绕过允许更改密码、创建用户以及在用户信息更新时提升权限。...

DEBIAN-CVE-2026-87608

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

UpdateWindowsRE-CVE-2022-41099

概述 从 u/InternetStranger4You 分叉而来，并进行了一些重大修改。 布局 代码分为两个模块： Microsoft.Windows.PSGeneral DISM 和 ReAgentC 的包装代码 针对待重启的扩展测试 Windows RE 分区的自动调整/重建 Microsoft.Windows.PSMitSec 集成 Microsoft.Windows.PSGeneral 必要时重试 Add-DismPackage 必要时扩展 Windows RE 分区 当然，这些模块仅用于演示目的。如果您希望正确使用它们，应创建清单文件并适当引用依赖项。 日志记录 使用...

CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI リモートコード実行（RCE） CVE-2020-5902 は、F5 BIG-IP の Traffic Management User Interface（TMUI / 設定ユーティリティ）における 重要な未認証リモートコード実行（RCE） 脆弱性です。 📌 概要 F5 により 2020年6月30日 （NVD は2020年7月1日公開）に開示されたこの欠陥により、管理インターフェースにネットワークアクセス可能な未認証の攻撃者 （または認証ユーザー）が、任意のシステムコマンドを実行...

Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46069 エクスプロイトタイトル: Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS エクスプロイト作者: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 中 参考文献: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2026-87462

UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88963

TL;DR. The FortiPAM Chrome extension 1M+ users, used for Privileged Access Management, allowed any site to set the browser's proxy for the session, alongside allowing any site to create a new tab and send screen recordings of it to an attacker's server. That makes for trivial phishing attacks whi...

UBUNTU-CVE-2026-82063

A use-after-free security issue in the cursor management component of...

Linux Distros Unpatched Vulnerability : CVE-2026-82063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific...

Linux Distros Unpatched Vulnerability : CVE-2026-87526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary cod...

Kibana 8.19.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 DoS (ESA-2026-125)

The version of Kibana installed on the remote host is 8.19.x prior to 8.19.21, or 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-125 advisory. - Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a...

PT-2026-89127

A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...