CVE-2026-86215

A session expiration vulnerability exists in the Logout Handler component (file Front-end/server.php) of Mstfakts College-Management-System , a self-hosted college management application on GitHub. Manipulation of the log_out argument allows a low-privileged remote attacker to force session expir...

CVE-2026-86215 Mstfakts College-Management-System Logout server.php session expiration

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

CVE-2019-6249_Hucart-cms

CVE-2019-6249Hucart cms 一、Resumen de la vulnerabilidad Nombre de la vulnerabilidad: Vulnerabilidad CSRF en Hucart cms v5.7.4 que permite agregar cuentas de administrador arbitrariamente Fecha de reporte: 2019-01-13 Descubridor: AllenChen [email protected] Página del producto:...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Intenta explotar una vulnerabilidad de WordPress CVE-2018-6389 que puede ser utilizada para causar una Denegación de Servicio. ADVERTENCIA: Este software no realiza un DoS en objetivos vulnerables; ejecuta solo una llamada HTTP GET para verificar si la vulnerabilidad está...

nextjs-cve-demo

Ejemplo: Bypass de Autorización en Next.js Middleware CVE-2025-29927 Este repositorio proporciona un proyecto de ejemplo que demuestra la vulnerabilidad de bypass de autorización en el middleware de Next.js CVE-2025-29927. Esta vulnerabilidad permite que usuarios no autorizados accedan a recursos...

CVE-2021-3560-EXPLOIT

Descripción Como parte de mi tesis de ciberseguridad, quería crear un exploit para una vulnerabilidad. RECOMIENDO ENCARECIDAMENTE leer esta guía, ya que este exploit está basado en ella: https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ Además, echa un vistazo a...

EUVD-2026-72128

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-86214

Mstfakts College-Management-System is affected by an improper authentication vulnerability in the file Front-end/login.php . The root cause is manipulation of the email argument, allowing a remote attacker with no privileges and low complexity to bypass authentication. Impact is rated MEDIUM (CVS...

CVE-2026-86214 Mstfakts College-Management-System login.php improper authentication

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-86214 Mstfakts College-Management-System login.php improper authentication

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

crack-0.1.8-fixed

= crack Análisis realmente simple de JSON y XML, extraído de Merb y Rails. El analizador XML está extraído de Merb y el analizador JSON de Rails. No me atribuyo el mérito, solo los empaqueté para que todos los disfruten y los usen fácilmente. == nota sobre versiones Las versiones se etiquetan en...

spip-cve-2023-27372-rce

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upload This Python script exploits CVE-2023-27372, an unauthenticated remote code execution vulnerability in SPIP CMS versions prior to 4.2.1. It leverages a cache poisoning flaw in the password reset mechanism to upload a web shell and...

EUVD-2026-72127

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

CVE-2026-86213

CVE-2026-86213 is a remote SQL injection in Mstfakts College-Management-System , specifically in the mysqli_query function within Front-end/university.php (Search Handler component). Manipulating the book_name or book_author arguments allows unauthenticated attackers to execute arbitrary SQL quer...

CVE-2026-86213 Mstfakts College-Management-System Search university.php mysqli_query sql injection

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

CVE-2026-86213 Mstfakts College-Management-System Search university.php mysqli_query sql injection

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

VivisectION

VivisectION Emulation-Driven Reversing Toolset VivisectION is the cross-section of GUI Reversing, Emulation and Debugging, with an emphasis on using Emulation and other powerful Vivisect toys to aid in Reverse Engineering and Vulnerability Research. Among other things, VivisectION aka Ion is a...

OpenPetya v2.0.0

OpenPetya A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++ If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this...

frida-ios-dump-modern

Modern iOS IPA Dumper A modern iOS application memory decryption tool built for Frida 17.5.2+ with full support for iOS 14-16 and multiple jailbreaks. Status: ✅ Working and Tested - Successfully dumps and decrypts iOS apps using Frida 17.5.2 on: iOS 14.7.1 + Taurine jailbreak iPad mini 5 iOS...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...