CVE-2026-30824-Flowise-NVIDIA-NIM-Authentication

CVE-2026-30824 — Flowise NVIDIA NIM Authentication Bypass Checker and Exploit A proof-of-concept checker and exploit for CVE-2026-30824 , a critical authentication bypass vulnerability in Flowise that exposes NVIDIA NIM API endpoints without authentication. Vulnerability Overview CVE-2026-30824 i...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

HotelDruid-CVE-2021-42949

CVE-2021-42949 The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks. The session id is dynamically created at each login using the following generalized syntax...

EUVD-2026-95120

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

CVE-2026-6274

CVE-2026-6274: Redline WR3200 Authentication Bypass English | Turkish This repository contains the technical details and Proof of Concept PoC for CVE-2026-6274. The vulnerability exists in Redline WR3200 routers prior to firmware v7.1.8 and allows an attacker to bypass authentication and change t...

CVE-disclosures

CVE-2026-3171 & CVE-2026-3170 – Archana M Official vulnerability disclosures by Archana M. 🔹 CVE-2026-3171 Product: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Vulnerability Type: Cross-Site Scripting CWE-79 Affected File: /queue.php Attack Vector: Remote User...

CVE-2026-7229-SQLI

Authenticated SQL Injection in Coaching Management System Allows Database Dump Description A SQL Injection vulnerability exists in the Coaching Management System in PHP. The complaintreply parameter in the admin reply functionality is not properly sanitized before being used in SQL queries. An...

CVE-2026-6184-stored-XSS

Stored XSS in News Title - Simple Content Management System PHP Description A Stored Cross-Site Scripting XSS vulnerability exists in Simple Content Management System PHP. The News Title field in the admin panel does not sanitize user input before storing it in the database and reflecting it on t...

CVE-2026-6182-SQLI-auth

Bypass dell'Autenticazione tramite SQL Injection - Simple Content Management System PHP Descrizione Esiste una vulnerabilità di SQL Injection nella pagina di login dell'amministratore di Simple Content Management System PHP. Il parametro user non viene sanitizzato prima di essere passato alla que...

CVE-2021-43129

CVE-2021-43129 Vulnerability in D2L Brightspace’s Learning Management SystemLMS Vulnerability Type: CWE-668: Exposure of Resource to Wrong Sphere Vendor of Product: Desire2Learn/D2L Affected Product Code Base: D2L Brightspace’s Learning Management SystemLMS Tested version: 20.21.7 D2L announced...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...

CVE-2026-7222-XSS

Stored Cross-Site Scripting XSS in Coaching Management System Leads to Account Takeover Product Coaching Management System in PHP Code-Projects.org https://code-projects.org/coaching-management-system-in-php-with-source-code/ Affected Components /modules/student/complaint.php Complaint Submission...

POC-CVE-2026-23520

CVE-2026-23520 — Arcane Lifecycle Label RCE OS Command Injection in Arcane Docker Management 1.13.0 Overview Arcane is a modern, web-based Docker management platform. Versions prior to 1.13.0 are vulnerable to an authenticated Remote Code Execution RCE via OS command injection in the updater...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability NVIDIA's GPU drivers have a temporal coherence flaw in their memory management. At 587 kHz resonance, the driver's memory pages experience α-decay interference, allowing kernel memory access from user space. NVIDIA GPU α-Resonance Exploit...

CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0

This repository does not have a README...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – iOS MDM Profile Delivery over HTTP Program Code Python Flask MDM server mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile delivered without HTTPS...

Detrix-Passwords-PoC

Exploit for obtaining Detrix users' passwords. http://forum.detrix.kz https://zen.yandex.ru/media/id/5d947e04f73d9d00ad0e86cc/uiazvimosti-sed-detrix-besplatnoi-programmy-avtomatizacii-dokumentooborota-5d947e2e92414d00ae292db7...

Shadow-Vault

Shadow Vault 🔐 Shadow Vault is a lightweight PHP web tool designed for system administrators to securely add new user credentials to shadow files on shared hosting environments. It automatically detects existing shadow aging format, uses SHA-512 password hashing, supports multiple write fallback...

zenmap

zenmap sudo apt update sudo apt install gdebi sudo gdebi libffi63.2.1-9amd64.deb sudo gdebi python-gobject-22.28.6-13+b1amd64.deb sudo gdebi python-numpy1.16.2-1amd64.deb sudo gdebi python-cairo1.16.2-1+b1amd64.deb sudo gdebi python-gtk22.24.0-5.1+b1amd64.deb sudo gdebi...

Security Bulletin: IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management (CVE-2026-105464)

Summary IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management. Vulnerability Details CVEID:CVE-2026-105464 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain...