605740 matches found
CVE-2026-87931 Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow
A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from...
mulot
mulot -4285F4?logo=googlechrome&logoColor=white Agentic AI web pentester that drives a browser. An open-weights LLM GLM-5.2, Gemma or Qwen drives a real headless Chromium through a Burp-style toolkit and works a target the way a human pentester would. No frontier model, no agent running inside a...
CVE-2026-87925 Rizwan17 inventory-management-system manage.php storeCustomerOrderInvoice sql injection
A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This vulnerability affects the function storeCustomerOrderInvoice of the file includes/manage.php. Performing a manipulation of the argument proname results in sql injection. The...
CVE-2026-87925 Rizwan17 inventory-management-system manage.php storeCustomerOrderInvoice sql injection
A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This vulnerability affects the function storeCustomerOrderInvoice of the file includes/manage.php. Performing a manipulation of the argument proname results in sql injection. The...
CVE-2026-87925
A SQL injection vulnerability in Rizwan17 inventory-management-system (up to commit bfe78a3) affects the storeCustomerOrderInvoice function in includes/manage.php. Manipulating the pro_name[] argument allows a remote, unauthenticated attacker to inject SQL, leading to partial compromise of confid...
CVE-2025-12030
CVE-2025-12030: ACF to REST API WordPress 插件中的不安全的直接对象引用 关键词： CVE-2025-12030, ACF to REST API 漏洞, IDOR, WordPress 安全, 经过身份验证的利用, WordPress 插件漏洞, CWE-639, ACF 字段修改, 授权绕过, WordPress CVE 2025, Advanced Custom Fields, REST API 安全 目录 概述 漏洞详情 技术分析 攻击向量 概念验证 修复指南 检测 CVSS 指标 参考 致谢 安全联系 概述 ACF to REST API...
CVE-2015-1925.RCE
CVE-2015-1925 The exploit targets Tivoli Fastback Server running on Windows 10 x86, build: 16299 , affecting version 6.1.4 , where an unauthenticated attacker can perform a buffer overflow through a raw socket connection , resulting in remote code execution RCE. This exploit assumes ASLR is not...
CVE-2026-28134
CVE-2026-28134 漏洞利用报告 JetEngine = 3.7.2 — 通过 Twig SSTI 实现已认证（Contributor+）远程代码执行 日期： 2026 年 3 月 11 日 CVSS 评分： 8.8（高危） CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 受影响插件： JetEngine = 3.7.2 插件 Slug： jet-engine CVE： CVE-2026-28134 状态： 私有 测试的 WordPress 版本： 最新版 执行摘要 CVE-2026-28134 是 JetEngine...
CVE-2026-87922
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function DBOperation.addCategory of the file includes/process.php of the component AJAX Backend. The manipulation of the argument useri...
CVE-2026-87921
A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...
ditto
ditto PowerShell 混淆器 Ditto 是一款基于 tree-sitter-powershell 和 tree-sitter-javascript 的 PowerShell 和 JavaScript 混淆器。 命令行用法 基本命令结构 ditto-cli 选项 CLI 参数与选项 短选项| 长选项| 描述 ---|---|--- -h| --help| 显示帮助信息并退出。 -v| --version| 显示版本信息并退出。 -p | --path | 要处理的脚本文件路径。 -i | --impostor | 用于混淆的 Impostor 配置文件（不区分大小写）。...
CVE-2026-87922 Rizwan17 inventory-management-system AJAX Backend process.php DBOperation.addCategory missing authentication
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function DBOperation.addCategory of the file includes/process.php of the component AJAX Backend. The manipulation of the argument useri...
CVE-2026-87922
CVE-2026-87922 affects Rizwan17 inventory-management-system (up to commit bfe78a3), a web-based inventory application. The vulnerability exists in the DBOperation.addCategory function within includes/process.php, part of the AJAX Backend component. By manipulating the userid argument, an unauthen...
CVE-2026-87922 Rizwan17 inventory-management-system AJAX Backend process.php DBOperation.addCategory missing authentication
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function DBOperation.addCategory of the file includes/process.php of the component AJAX Backend. The manipulation of the argument useri...
CVE-2026-34975
CVE-2026-34975 — CRLF Email Header Injection in Plunk via raw MIME construction Severity : High CVSS 8.5 CWE : CWE-93 — Improper Neutralization of CRLF Sequences 'CRLF Injection' Affected : useplunk/plunk = 0.7.1 Fixed in : 0.8.0 Advisory : GHSA-2mvm-rg5v-7hfq NVD :...
CVE-2026-87921 Rizwan17 inventory-management-system manage.php update_record sql injection
A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...
CVE-2026-87921 Rizwan17 inventory-management-system manage.php update_record sql injection
A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...
CVE-2026-87921
Rizwan17 inventory-management-system (a GitHub-hosted project) contains a SQL injection vulnerability in the update_record function within includes/manage.php. Remote attackers can exploit this by manipulating the update_category, cid, update_brand, or update_product arguments without requiring a...
Threat matrix: Mapping threats across cloud web applications
In this article 1. Overview 2. Technique Catalog 3. Privilege Escalation 4. Mitigation and protection guidance 5. References 6. Learn more Microsoft introduces the cloud web applications threat matrix, a MITRE ATT &CK-aligned framework that helps defenders understand, prioritize, and mitigate...
