30964 matches found
CVE-2026-100887 amirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection
A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted element is the function orderby of the file DBquerybuilder.php of the component Database Query Builder. Performing a manipulation of the argumen...
CVE-2026-100887
A SQL injection vulnerability exists in the Database Query Builder component of the amirsanni Mini-Inventory-and-Sales-Management-System (versions up to 81bf0b55f5933f3b0dbb1583204a612e06605b95 ). The flaw is located in the order_by function within the DB_query_builder.php file, where manipulatio...
CVE-2026-100887 amirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection
A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted element is the function orderby of the file DBquerybuilder.php of the component Database Query Builder. Performing a manipulation of the argumen...
CVE-2025-49132
Impacto Usando el archivo /locales/locale.json con los parámetros de consulta locale y namespace, un actor malicioso puede ejecutar código arbitrario, sin estar autenticado. Con la capacidad de ejecutar código arbitrario, esta vulnerabilidad puede ser explotada de innumerables maneras. Podría...
CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC
ZoneMinder Time-Based SQL Injection CVE-2024-51482 📌 Vulnerability Overview CVE ID: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Affected versions: ZoneMinder 1.37. up to and including 1.37.64 Patched version: 1.37.65 📖 Description This repository contains a high-performance, parallelized...
CVE-2025-49132
Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...
cve-2023-5044
CVE-2023-5044 Ingress Nginx Exploit Proof-Of-Concept Este es un programa rápido en Go para explotar la reciente CVE en el controlador Ingress Nginx. Los detalles sobre cómo hacer esto ya están disponibles a través del blog de Rory McCune en...
CVE-2024-51665
CVE-2024-51665 Magical Addons For Elementor = 1.2.1 - Autenticado Suscriptor+ Falsificación de Solicitudes del Lado del Servidor Descripción: El plugin Magical Addons For Elementor Header Footer Builder, Free Elementor Widgets, Elementor Templates Library para WordPress es vulnerable a la...
CVE-2024-1380
CVE-2024-1380 Relevanssi – A Better Search = 4.22.0 - Falta de autorización permite la exportación no autenticada del registro de consultas Descripción El plugin Relevanssi – A Better Search para WordPress es vulnerable al acceso no autorizado de datos debido a la falta de una comprobación de...
CVE-2012-1823
Inyección de Argumentos en PHP CGI CVE-2012-1823 Descripción sapi/cgi/cgimain.c en PHP anterior a 5.3.12 y 5.4.x anterior a 5.4.2, cuando está configurado como un script CGI también conocido como php-cgi, no maneja adecuadamente las cadenas de consulta que carecen de un carácter = signo igual, lo...
CVE-2026-44262
dedoc/scramble RCE CVE-2026-44262 PoC 📜 Description CVE-2026-44262 is an unauthenticated Remote Code Execution vulnerability in dedoc/scramble, a Laravel API documentation generator. NodeRulesEvaluator::doEvaluateExpression calls extract$variables before eval"return $code;". When a controller...
CVE-2024-27304-PoC
CVE-2024-27304-PoC references DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp A simple web application with login functionality. Only administrators can log in. This application uses PostgreSQL...
CVE-2026-54433
CVE-2026-54433: Roundcube plain-text email stored XSS This repository contains a configurable Python proof of concept for CVE-2026-54433 , a stored cross-site scripting vulnerability in Roundcube's plain-text email renderer. An unauthenticated sender can deliver a crafted text/plain message. When...
CVE-2026-55993
camel-atmosphere-websocket Header Injection Reproducer CVE-2026-55993 This project demonstrates a message-header injection in Apache Camel's camel-atmosphere-websocket component, tracked as CVE-2026-55993. The WebSocket consumer copies the connection's query parameters onto the Camel Exchange...
CVE-2025-30208
CVE-2025-30208 — Vite Arbitrary File Read · v5 CVE: CVE-2025-30208 GHSA: GHSA-x574-m823-4x7w Severity: CVSS 5.3 Medium network-accessible dev server ⚠ For authorized security engagements only. Unauthorized use against systems you do not own or have explicit written permission to test is illegal...
WP Query Console <= 1.0 - Remote Code Execution
Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console- from n/a through 1.0. id: CVE-2024-50498 info: name: WP Query Console = 1.0 - Remote Code Execution author: s4e-io severity: critical...
couchdb-exploit
🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution 📖 Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| 🔴...
CVE-2017-5638
CVE-2017-5638 Google Dork : "site:com filetype:action"...
dig
dig macOS 上的本地 dig 包装器。真正发查询的还是系统自带的 /usr/bin/dig。这个项目只在你自己的终端输出后面追加一条本地 TXT，方便本地测试。 它不改 DNS，不写 zone file（区域文件），也不碰任何云厂商。 行为 给某个域名钉死一条 TXT，之后每次查都返回 dig +txt= TXT dig +txt= +ttl=600 TXT name：域名，比如 app.local value：这条 TXT 的内容，写在 +txt= 后面。有空格就加引号 +ttl=：展示用的 TTL，默认 600 dig +txt=env=staging TXT app.loc...