CVE-2024-7029-EXPLOIT

CVE-2024-7029-エクスプロイト...

CVE-2019-9053

CVE-2019-9053 --- Python3 原始 Exploit 来源: https://www.exploit-db.com/exploits/46635 POC 视频 -- https://attackdefense.com/challengedetailsnoauth?cid=1326 attackdefense...

CVE-2023-22855

CVE-2023-22855 该漏洞由 Nico Viakowski 和我发现并披露。本仓库将包含安全公告和漏洞利用代码。 本仓库仅供教育目的使用。 链接 厂商网站：https://www.kardex.com/en/mlog-control-center Exploit-DB 上的漏洞利用：https://www.exploit-db.com/exploits/51239 博客文章（安全公告）：https://hesec.de/posts/CVE-2023-22855 博客文章（Thinking...

EUVD-2026-75211

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument...

EUVD-2026-75182

A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...

CVE-2026-87933 DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free

A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...

CVE-2026-87933

A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...

EUVD-2026-75225

A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...

PT-2026-89190

A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils MergePatch of the file cJSON Utils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request t...

CVE-2026-87925

A SQL injection vulnerability in Rizwan17 inventory-management-system (up to commit bfe78a3) affects the storeCustomerOrderInvoice function in includes/manage.php. Manipulating the pro_name[] argument allows a remote, unauthenticated attacker to inject SQL, leading to partial compromise of confid...

CVE-2026-87923

CVE-2026-87923 affects the Rizwan17 inventory-management-system GitHub project, specifically the List Handler component in the file includes/DBOperation.php. The vulnerability is a cross-site scripting (XSS) flaw caused by improper handling of the category_name, brand_name, and product_name argum...

CVE-2026-87921

A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...

CVE-2026-87922

CVE-2026-87922 affects Rizwan17 inventory-management-system (up to commit bfe78a3), a web-based inventory application. The vulnerability exists in the DBOperation.addCategory function within includes/process.php, part of the AJAX Backend component. By manipulating the userid argument, an unauthen...

CVE-2022-0847-DirtyPipe-Exploit

在 Linux Kernel 直至 5.10.101/5.15.24/5.16.10（操作系统）中发现了一个漏洞，且被归类为严重。该漏洞影响了组件 Pipe Handler 的某些未知处理过程。受影响的是机密性、完整性和可用性。 该漏洞于 2022 年 3 月 8 日披露。公告发布在 dirtypipe.cm4all.com。该漏洞的标识符为 CVE-2022-0847。已知易于利用。攻击可能远程发起。利用时需要简单的认证。技术细节未知，但已有公开的利用代码。 升级至版本 5.10.102、5.15.25 或 5.16.11 可消除此漏洞。应用补丁能够解决该问题。修复程序已可下载，地址为...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 脆弱性ラボ このフォルダは、CVE-2025-54068 を再現するために、Livewire 3.6.3 （脆弱性のあるバージョン）に固定した最小限の Laravel + Livewire v3 アプリケーションを構築します。 マウントされたコンポーネントは、公開されているエクスプロイトチェーンと互換性を持つように意図的に作成されています（ステージ1のキャストから配列へのステップを許可します）。 クイックスタート root@kitploit: docker compose up -d --build 開く：...

CVE-2023-23396

CVE-2023-23396 这里你可以下载利用代码。 这里你可以阅读我的报告。 这里你可以请我喝杯咖啡 🦄 附注 在撰写本文时（2023-04-07），Microsoft Excel 的客户端版本仍然存在漏洞（这里有更多信息）。 分享知识！...

CVE-2017-16088

CVE-2017-16088 Exploit para CVE-2017-16088 https://www.wispwisp.com/?p=559...

2023-2245

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2024-47062

CVE-2024-47062 POC Detailed Blog here...

EUVD-2026-74042

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...