1132231 matches found
GNUnet P2P Framework 0.26.2
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...
CVE-2026-78140 Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...
Malicious code in mlflow-otel-instrumentor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 596b37cefcfec9359e87bfd5663962ce80c05c8851c4f894b6b4ea294ee0bbfd During installation package downloads and executes an executable. The remote executable appears to be broken but suggests intentions for persistence via system...
solutions
Exploitmatic solutions !License: Apache 2.0https://img.sh...
Exploit for Release of Invalid Pointer or Reference in Mozilla Firefox
CVE-2026-15718 — who put ptrs in my wasm Proof-of-concept exp...
Exploit for CVE-2026-10053
CVE-2026-10053 — reproducible verification lab Self-contained...
Exploit for CVE-2026-66917
IDOR + Stored XSS via Broken Object-Level Authorization in Joo...
Exploit for CVE-2026-66916
Password-Protected Category Bypass via JSON Format in JoomGall...
poc_cve_2026_19681
CVE...
The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...
CVE-2026-78112
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...
CVE-2026-78115
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edituseraccount.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...
CVE-2026-78115 SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edituseraccount.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...
CVE-2026-78115
SourceCodester Class and Exam Timetabling System 1.0 is affected by an improper authorization vulnerability in the User Account Update component, specifically in the file /admin/edit_user_account.php. Manipulation of the id/username argument allows a remote, authenticated attacker to bypass autho...
EUVD-2026-64646
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edituseraccount.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...
nginx-log-analyzer
nginxloganalyzer Nginx Access Log Security Analysis Tool —...
EUVD-2026-64647
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...
CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...
CVE-2026-78112
A SQL injection vulnerability exists in itsourcecode Hospital Management System Project in PHP 1.0 , specifically in the file /viewservicetype.php through manipulation of the delid parameter. The flaw can be exploited remotely and requires low privileges (authenticated access). CVSS 3.1 scores it...