Royal-Event-Management-System-todate-SQL-Injection-Authenticated

Sistema de Gestión de Eventos Royal - Inyección SQL en 'todate' Autenticado 1. Descripción: Royal Event Management System 1.0 permite Inyección SQL a través del parámetro 'todate' en /royalevent/btndatesreport.php?= Explotar este problema podría permitir a un atacante comprometer la aplicación,...

CVE-2026-32646

CVE-2026-32646: Missing Authentication on Administrative Device Management Endpoint Advisory Field| Value ---|--- CVE| CVE-2026-32646 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 7.5 High Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE| CWE-306 Missing Authentication for Critical Function...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Nuclei Template CVE-2022-1388 BIG-IP iControl REST Exposed May 06, 2022 This only verifies the presence of the API by hitting the authentication endpoint This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP...

cve-2018-9208

CVE-2018-9208 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9208 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

pywhatcms

PyWhatCMS Python package for whatcms.com API The package provides a simple way to use the whatcms.org API for detecting 467 different Content Management Systems CMS Installation root@kitploit: pip install pywhatcms Usage First of all, import pywhatcms: root@kitploit: from pywhatcms import whatcms...

CVE-2024-34224

Computer Laboratory Management System using PHP and MySQL 1.0 Submitter: Kha Do Vulnerability Cross Site Scripting Description Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject...

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter...

CVE-2022-27413

Hospital-Management-System v1.0 - SQLi Vendor Description: The vulnerability page is admin.php http://you ip/HMS/admin.php Hospital-Management-System v1.0 The adminname parameter in the admin.php page appears to be vulnerable to SQL injection attacks...

Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

CVE-2026-77105 CommServe Privilege Escalation

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

EUVD-2026-72731

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77089 Command Center API Authentication Bypass

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center...

EUVD-2026-72722

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center...

CVE-2026-77089

Commvault Command Center is affected by an authentication bypass in its API that impacts privilege management . A remote, unauthenticated attacker can exploit this over the network with low complexity, achieving high impact on confidentiality, integrity, and availability of the vulnerable system ...

EUVD-2026-72724

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

CVE-2021-40223

CVE-2021-40223 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Stored XSS Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input on Security...

certbot

.. Este archivo contiene una serie de comentarios que se utilizan para incluir secciones de este README en otros archivos. No modifiques estos comentarios a menos que sepas lo que estás haciendo. tag:intro-begin |build-status| .. |build-status| image::...

CVE-2022-31897

CVE-2022-31897 Date: 06/22/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Version: 1.0 Tested on: Server: XAMPP on Windows 10...

CVE-2024-10355

Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\invoice.php file,...

CVE-2026-24207

CVE-2026-24207 — NVIDIA Triton SageMaker Auth Bypass to Unauth RCE Unauthenticated attackers can reach the model-management surface of NVIDIA Triton Inference Server on the SageMaker and Vertex AI HTTP ports — bypassing the operator's --http-restricted-api configuration. Combined with the SageMak...