EUVD-2026-67124

Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...

CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343

HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability that may allow user sessions to remain active after logout or session deletion. The assigned CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexity and required user inte...

CVE-2025-62342

HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability where user sessions may not be fully terminated after logout or deletion, due to improper session handling. The vulnerability carries a CVSS 3.1 score of 6.4 (Medium) with high impacts to confidentiality and ava...

CVE-2025-62342 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...

CVE-2020-13259

CVE-2020-13259 PoC der vollständigen Account-Übernahme auf RAD SecFlow-1v Eine Sicherheitslücke in der webbasierten Verwaltungsoberfläche von RAD SecFlow-1v könnte es einem nicht authentifizierten, entfernten Angreifer ermöglichen, einen Cross-Site-Request-Forgery-Angriff CSRF auf ein betroffenes...

CVE-2021-43657

CVE-2021-43657 Questo è un riferimento/POC per CVE-2021-43657 Questa vulnerabilità è stata trovata mentre stavo giocando con il software open source responsabile del sistema di gestione dei compiti dei dipendenti...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 è una vulnerabilità nel plugin LiteSpeed Cache, un popolare plugin WordPress. Questa vulnerabilità riguarda la gestione delle sessioni in LiteSpeed Cache, consentendo agli aggressori di ottenere accesso non autorizzato a dati sensibili. Anteprima Come...

CVE-2018-16373

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:11+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-28 00:00:55+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-29 00:00:15+00:00| published-proof-of-concept|...

resmack-fuzz-test

Resmack Test di Fuzz Questo progetto è un'esplorazione di un fuzzer guidato dal feedback che utilizza: ptrace per l'instrumentazione con breakpoint di memoria dinamici specificati dal processo target snapshot/ripristino dei processi utilizzando /proc/pid/map, /proc/pid/clearrefs e /proc/pid/pagem...

CVE-2025-25964

CVE-2025-25964: SQL Injection in School Information Management System v1.0 Introduzione Nel panorama digitale odierno, l'SQL Injection SQLi rimane una delle vulnerabilità più comuni e pericolose nelle applicazioni web. Questo post del blog discute una vulnerabilità critica di SQL Injection...

CVE-2022-1040

CVE-2022-1040 : Sophos XG115w Firewall 17.0.10 MR-10 - Bypass de Autenticação Esta vulnerabilidade permite que um atacante obtenha acesso não autorizado ao espaço de gerenciamento do firewall ao contornar a autenticação ☕️ Ao vivo : ....... atualizado...

CVE-2026-10170-RCE

Visitor Management System 1.0 – SQLi zu Remote Code Execution Angriffskette Schwachstelleninformationen...

CVE-2026-10110-SQLi

Student Details Management System 1.0 – SQL-Injection ohne Authentifizierung Informationen zur Schwachstelle...

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Descrizione Esiste una vulnerabilità di cross-site scripting XSS riflesso in /dashboard/settings.php nel Bank Management System in Web 1.0. La vulnerabilità si verifica a causa di una sanitizzazione impropria dell'input fornito dall'utente nel parametro GET msg. Un...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentifizierungsumgehung Kaiten – ein Workflow-Management-System. Eine Schwachstelle in Kaiten ermöglicht es Angreifern, den PIN-Code-Authentifizierungsmechanismus zu umgehen. Die Anwendung verlangt von Benutzern nach der Eingabe ihrer Anmeldedaten die Eingabe eines...

CVE-2024-36840-Exploit

CVE-2024-36840: Vulnerabilità di SQL Injection in Boelter Blue System Management Versione 1.3 Dettagli dell'Exploit Titolo dell'Exploit : Vulnerabilità di SQL Injection in Boelter Blue System Management versione 1.3 Google Dork Originale : inurl:"Powered by Boelter Blue" non ha funzionato zero ur...

CVE-2025-56802

CVE-2025-56802 Schwachstelle bei der AES-CFB-Schlüsselerzeugung und -Verwaltung in der Reolink-Desktop-Anwendung 1. Überblick Name : Reolink-Desktop-Anwendung Version : 8.18.12 Anbieter : Reolink CWE : CWE-321: Verwendung eines hartcodierten kryptografischen Schlüssels, CWE-522: Unzureichend...

CVE-2023-7173

CVE-2023-7173: Stored Cross-Site Scripting XSS im Krankenhausverwaltungssystem Details zur Schwachstelle CVE-ID: CVE-2023-7173 Schwachstellentyp: Stored XSS Betroffene Komponente: Benutzer-Login-Seite Verwundbarer Parameter: Fullname Herstellerdetails: phpgurukul.com Verwundbare Version: Hospital...

CVE-2023-7172

CVE-2023-7172 Überblick Dieses Projekt enthält eine verwundbare Version eines Krankenhausverwaltungssystems Hospital Management System, HMS, das anfällig für SQL-Injection CVE-2023-7172 ist. SQL-Injection ist eine kritische Webanwendungs-Schwachstelle, die schwerwiegende Auswirkungen auf die...