CVE-2026-85398 code-projects Hospital Information System viewReq.php viewReq sql injection

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

EUVD-2026-70866

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

CVE-2026-85398 code-projects Hospital Information System viewReq.php viewReq sql injection

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

CVE-2022-34963

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Vulnerability Explanation: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module. Attack Vectors: The attacker must post something on the...

pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

Dr.DLL-CVE-2018-18333

Attack CVE Windows - CVE-2018-18333 前提条件 📋 Names| Method of install ---|--- metasploit| Click for install pythonv.X| apt install python 执行: Execute 🚬 root@kitploit: 1. $ sudo python Dr.Dll.py 2. 输入请求的数据（Enter the requested data） 3. 启动 metasploit Start metasploit 可选 4. Happy Hacking :...

BITB

BITB 用于浏览器内浏览器（BITB）攻击的浏览器模板。 更多信息：https://mrd0x.com/browser-in-the-browser-phishing-attack/ 使用说明 每个文件夹包含一个 index.html 文件，其中有 4 个需要修改的变量： XX-TITLE-XX - 页面显示的标题（例如：立即登录您的账户） XX-DOMAIN-NAME-XX - 您伪装的域名（例如：gmail.com） XX-DOMAIN-PATH-XX - 域名路径（例如：/auth/google/login） XX-PHISHING-LINK-XX - 将嵌入到 iframe...

CVE-2021-31760

..| CVE-2021-31760 |.. Description : 利用跨站请求伪造CSRF攻击，通过Webmin的运行进程功能获取远程命令执行RCE。 Tested Version : Webmin 1.973 GitHub最新版本 07/03/2021 Attack Type: 远程 Impact : 远程命令执行 利用代码POC : YouTube POC : https://youtu.be/D45FN8QrzDo 产品厂商 : https://www.webmin.com 附加信息 :...

CVE-2023-34051

CVE-2023-34051 CVE-2023-34051 是一个认证绕过漏洞，绕过了 VMSA-2023-0001 的补丁。 VMSA-2023-0001（适用于 vRealize Log Insight）包含以下 CVE： VMware vRealize Log Insight 目录遍历漏洞 CVE-2022-31706 VMware vRealize Log Insight 访问控制缺陷漏洞 CVE-2022-31704 VMware vRealize Log Insight 信息泄露漏洞 CVE-2022-31711 此漏洞的默认配置会写入一个 cron 任务以创建反向...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

DynamiApps Frontend Admin <= 3.28.20 - Unauthenticated Arbitrary Options Update

DynamiApps Frontend Admin plugin for WordPress .= 3.28.20 contains a broken access control vulnerability caused by insufficient capability checks and input validation in ActionOptions::run save handler, letting unauthenticated attackers modify critical WordPress options via crafted form data. id:...

Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection

Sangoma Switchvox before version 8.4.0.2 contains an unauthenticated SQL injection vulnerability in the /pa endpoint PhoneAppsHandler.pm. The PhoneIP field extracted from an XML POST body is concatenated directly into an unparameterized PostgreSQL query that runs as a database superuser. An...

Spring Framework - Path Traversal

Spring Framework MVC applications deployed as WAR or with embedded Servlet containers that do not reject suspicious URI sequences and serve static resources with Spring resource handling contain a path traversal vulnerability, letting attackers access unauthorized files, exploit requires...

LatePoint <= 5.0.12 - Authentication Bypass

LatePoint plugin for WordPress versions up to 5.0.12 contains an authentication bypass caused by insufficient verification of user during booking, letting unauthenticated attackers log in as any existing user if they have user ID access, exploit requires access to user ID, and the 'Use WordPress...

Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference

Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. id: CVE-2024-33939 info: name: Masteriyo LMS = 1.7.3 - Insecure Direct Object Reference author:...

Easy Digital Downloads - Privilege Escalation

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1. id: CVE-2023-30869 info: name: Easy Digital Downloads - Privilege Escalation author: daffainfo severity: critical...

EasyCVR <=2.1.2 - Information Disclosure

A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit ha...

SureForms <= 1.13.1 - Sensitive Information Exposure

SureForms WordPress plugin = 1.13.1 contains a sensitive information exposure caused by setting 'authcallback' to 'returntrue' in 'srfmemailnotification' post meta registration, letting unauthenticated attackers access sensitive email notification data, exploit requires no authentication. id:...

ZKTeco BioTime <= 9.0.1 - Privilege Escalation

BioTime default employee credentials password 123456 allow login. Sessions are not role-validated, enabling privilege escalation to perform admin actions and enumerate backup files. id: CVE-2023-38952 info: name: ZKTeco BioTime = 9.0.1 - Privilege Escalation author: riteshs4hu severity: high...

10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service. id: CVE-2023-5559 info: name: 10Web Booster 2.24.18 - Unauthenticated Arbitra...