CVE-2025-22963

Overview Cross-site request forgeryCSRF vulnerability in Teedy versions = v1.11 allows remote attackers to force an end user to change their user informationusername, password, etc... on the web application in which they're currently authenticated. CVE ID| CVE-2025-22963 ---|--- CWE ID| CWE-352 C...

CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 Advanced Exploitation Tool Professional React Server Components DoS Exploitation Framework "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 Quick Start • 📖 Documentation • 💻 Features • ⚠️ Disclaimer 🎯 About CVE-2025-55184 CVE-2025-55184 is a high-severity Denial of Service DoS...

CVE-2023-30146

CVE-2023-30146 - Assmann/HooToo Webcam Exploit - Sensitive Data Exposure Description An issue was discovered in HooToo and Assmann branded IP-Cameras. The firmware stores the administrator and user credentials in the backup in plaintext. The backup can be retrieved and decompressed without...

EUVD-2026-109108

e-SIC Livre esiclivre v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters l, a, tf, ql without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via...

CVE-2023-30092

CVE-2023-30092 All Details about CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Software Link: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Vulnerability Type: SQL Injection Affected Component: QTY Parameter Impact Denial of Service:...

CVE-2025-3248

POC - Remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code - CVE-2025-3248 Overview Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP request...

CVE-2019-11510-PulseVPN

CVE-2019-11510-PulseVPN In Pulse Secure Pulse Connect Secure PCS 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability. exploit.sh = Exploring Vulnerability...

CVE-2023-27742

CVE-2023-27742 IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Description IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Vulnerability Type SQL Injection Vendor of Product IDURAR...

CVE-2023-46954

CVE-2023-46954 SQL Injection vulnerability in Relativity Server 2022 v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter. Vulnerability Type SQL Injection Vendor of Product Relativity ODA LLC Affected Product Code Base Relativity Server 2022...

CVE-2025-62168

CVE-2025-62168 Squid Proxy Information Disclosure in Error handling Scanner Detection & PoC "Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity: This problem allows a script to bypass Browser security protections and learn...

ReadyScript e-commerce management system Sequence Data Compromise

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

OLIMPOX Authentication Bypass Info Disclosure

The vulnerability of the software for the training and control system “OLIMPOX” is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information and modify data within...

CRM Platform Path Traversal DoS

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

Shtab Project Access Control Unauthorized Access

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

YouGile Project Management Service Random Number Generator Error

The vulnerability of the YouGile project management service is related to errors in the code of the pseudorandom number generator used for generating host keys. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application...

YouGile Project Management XSS

The vulnerability of the YouGile project management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

Centralized Printer MFP Supervision Unauthorized Access

The vulnerability of the software for centralized printer control and the Printsupervision printer system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

TOPAZ Metron PTS Time Synchronization Command Injection

The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...

Tekon SCADA Code Execution

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

Tekon SCADA Privilege Escalation

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...