security-research

Investigación de Seguridad Vulnerabilidades que he reportado a la Apache Software Foundation, divulgadas a través del proceso de seguridad de la ASF. 46 CVE en 15 proyectos , de 2023 a 2026. Cuando existe un reproductor público, se enlaza. Cada uno es un proyecto mínimo y autocontenido que...

cve-2023-4863-analysis

CVE-2023-4863 libwebp Training and Defense Analysis Project Advisor Information Full Name| GitHub| Email| LinkedIn| Website ---|---|---|---|--- Keyvan Arasteh| @keyvanarasteh| [email protected]| keyvanarasteh| qline.tech Student Information Full Name| Student ID ---|--- Batuhan Seydi Çelik| ...

CVE-2026-105253

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-105253

The itsourcecode Online Admission System Project 1.0 is vulnerable to a SQL injection vulnerability in the /admin/login1.php file. The flaw is caused by improper processing of the User argument, which allows an unauthenticated remote attacker to execute arbitrary SQL commands. The exploit has bee...

CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

EUVD-2026-92288

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

pev

readpe pev se ha movido a @mentebinaria/readpe y tiene un nuevo mantenedor. :...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 描述 在 Leantime 目标导向项目管理系统的 3.0.6 版本中发现了以下漏洞。 CVE-2024-27474 一个跨站请求伪造（CSRF）漏洞，触发后会创建并提升一个账户的权限至管理员角色。 CVE-2024-27476 一个 HTML 注入漏洞，允许攻击者通过 href 属性或锚标签向应用程序注入恶意 HTML 代码。在我的概念验证（POC）中，我利用它重定向“受害者”（也就是我自己）到一个攻击者控制的登录页面，在那里可能会窃取他们的凭据。...

CVE-2026-105245

The sgl-project sglang library (up to version 0.5.21 ) contains a vulnerability in the HTTP Endpoint component, specifically within the server_info function of the python/sglang/srt/entrypoints/http_server.py file. Manipulation of the api_key argument can result in the cleartext transmission of s...

CVE-2026-54121

cve-id 捐赠 通过 PayPal 或扫描下方 QR 码支持本项目的维护。 ⚡ 简单用法 仅在安全且获得授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 授权的渗透测试环境 示例设置： git clone cd 项目使用 Python，请按照以下步骤操作 创建虚拟环境 python -m venv venv 激活虚拟环境 macOS / Linux source venv/bin/activate Windows（Git Bash / WSL） source venv/Scripts/activate 安装依赖 pip install -r...

Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

Online Piggery Management System v1.0 - Unauthenticated File Upload

Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to add-pig.php. id: CVE-2023-37629 info: name: Online Piggery Management System v1.0 - Unauthenticated File Upload author: Harsh severity: critical descriptio...

Advanced Comment System 1.0 - Local File Inclusion

ACS Advanced Comment System 1.0 is affected by local file inclusion via an advancedcomponentsystem/index.php?ACSpath=..%2f URI. id: CVE-2020-35598 info: name: Advanced Comment System 1.0 - Local File Inclusion author: daffainfo severity: high description: ACS Advanced Comment System 1.0 is affect...

CVE-2026-36226

CVE-2026-36226：Advantech WebAccess/SCADA 创建新项目用户 XSS 概念验证 此仓库包含针对 CVE-2026-36226 的无害概念验证，该漏洞是 Advantech WebAccess/SCADA 8.0-2015.08.16 中的跨站脚本问题。 此仓库仅用于授权的安全研究和本地复现。请勿将其用于您不拥有或未经明确许可测试的系统。 概述 Advantech WebAccess/SCADA 8.0-2015.08.16 在管理仪表盘的创建新项目用户组件中存在一个跨站脚本漏洞。decryption...

CVE-2026-105174

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174

A path traversal vulnerability exists in Gerapy up to version 0.9.13 within the Project Management component. The issue is located in the project_create function of the gerapy/server/core/views.py file, where improper handling of the project_name argument allows for unauthorized directory access....

EUVD-2026-92154

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

EUVD-2026-92470

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts...