CVE-2026-112150

The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) is vulnerable to a remote SQL injection flaw. The vulnerability exists within an unknown function of the search.php file, where manipulating the Search argument allows an attacker to execute arbitrary ...

CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / offsets might differ, kernel was custom compiled you can read vmlinux and caculate the offset when testing / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define DACMMAPMINADDR 0xe8e810 / get...

RustChain

Description This tool is a simple PoC of how to hide memory artifacts using a ROP chain in combination with hardware breakpoints. The ROP chain will change the main module memory page's protections to N/A while sleeping i.e. when the function Sleep is called. For more detailed information about...

EUVD-2026-104385

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149

The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) contains an unrestricted file upload vulnerability within the home.php file. The flaw exists in the move_uploaded_file function, where manipulating the my_img argument allows for unauthorized file uplo...

CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

WebminRCE-EXP-CVE-2019-15107-

CVE-2019-15107: Exploit Modules Available for Remote Code Execution Vulnerability in Webmin 1. Vulnerability Description Webmin is a powerful web-based system administration tool, widely used on Unix systems. Due to a command injection vulnerability in the old parameter during the processing of...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the...

bitpixie

bitpixie Full blog post here Main References syss blog post Syss's Github repository Bitpixie BitLocker Exploit Implementation Virtual machine reproduction. The local machine attacker machine uses Ubuntu 22.04.5 LTS system, while the victim machines are Windows 10 21H2 19041.1 and Windows 11 21H2...

Prineo_RE

About PriPara internal name Prineo is an arcade rythm game developed by SynSophia. Goal The goal of this project was to reverse the model format of the arcade series in order to port exclusive characters to the newer version of the game on Nintendo Switch. Screenshots Some interesting screenshots...

exim-rce-cve-2018-6789

Exim RCE CVE-2018-6789 Learning Environment Description This is a set of files, scripts, notes, ... to set up an environment to investigate the Exim RCE CVE-2018-6789. It can be used to debug Exim, write exploits, trace Exim function calls, learn about Exim's custom memory management storeblocks,...

CVE-2025-47550

Instantio - Wordpress Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu...

CVE-2026-112145

A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager.loadfn of the file src/speaches/executors/pyannotediarization.py of the component Pyannote Diarization Model Loading. The manipulation of th...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in MessagePack

Summary MessagePack is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-48924 Vulnerability Details CVEID:CVE-2024-48924 DESCRIPTION: Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service...

cve-2016-7190

Overview CVE-2016-7190 0 is a heap overflow in the Array.map function of ChakraCore that allows to overwrite adjacent memory. The main idea to gain arbitrary read-write access is to first allocate a number of consecutive JavaScript integer Arrays. and to exploit the overflow to manipulate the siz...

CVE-2024-0195-SpiderFlow

CVE-2024-0195 Improper Control of Generation of Code 'Code Injection' Critical 2024 Summary CVE-2024-0195 is a critical code injection vulnerability in the spider-flow 0.4.3 web application, specifically in the FunctionService.saveFunction function of the FunctionController.java file. An attacker...

EUVD-2026-104384

A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made...