DNCI

DNCI - Dot Net Code Injector DNCI允许将.NET代码（.exe或.dll）远程注入到Windows的非托管进程中。 1. 项目结构 项目结构如下： DNCI.Injector.Library - 注入库。包含所有注入组件和逻辑； DNCI.Injector.Runner - 命令行注入工具； DNCIClrLoader - 用于将.NET程序集加载到内存的C++微代码； InjectDemo.Console.ClassicNet - 待注入的演示经典.NET控制台应用程序； InjectDemo.Console.DotNetCore -...

AtlasLdr

Atlas es un cargador reflectivo x64 que tiene las siguientes características: Características Obtención de DLL y PE desde un servidor remoto Mapeo manual en un proceso remoto Borrado de los bytes mágicos de la cabecera DOS y de NTHeader Código independiente de posición Uso de syscalls indirectas...

win32k-callback-detouring

Descargo de responsabilidad Este repositorio se proporciona estrictamente con fines educativos y de investigación defensiva. Demuestra los mecanismos internos de despacho de callbacks de Windows y conceptos de flujo de control relacionados con KernelCallbackTable en un contexto de prueba de...

shed

Shed - .NET 运行时检查器 Shed 是一款用于检查程序 .NET 运行时以提取有用信息的应用程序。它可用于检查恶意应用程序，以便在恶意软件运行时初步了解其中存储了哪些信息。 Shed 能够： 将 .NET Assembly 注入到远程进程中（包括托管和非托管进程） 提取托管堆中存储的所有对象 打印内存中存储的字符串 以 JSON 格式保存堆的快照，用于后期处理 转储所有加载到内存中的模块 下载 源代码 下载二进制文件 使用 Shed Shed 是一款命令行工具。要显示所有可用选项，请运行： shed.exe --help 检查正在运行的应用程序...

XXL-JOB v2.2.0 — Stored Cross Site Scripting

Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file. id: CVE-2020-23814 info: name: XXL-JOB v2.2.0 — Stored Cross Site Scripting author:...

ChurchCRM 4.5.3 - Cross-Site Scripting

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php. id: CVE-2023-26843 info: name: ChurchCRM 4.5.3 - Cross-Site Scripting author: Harsh severity: medium description: | A stored Cross-site scripti...

Astra Linux – Vulnerability in exim4

Exim 4.98 before 4.98.1 allowed remote SQL injection when SQLite hints and ETRN serialization were used. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CVE-2026-19354

A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an unknown function of the file controllers/messages/message.go of the component IN Clause Handler. Performing a manipulation of the argument ids results in sql injection. The attac...

CVE-2026-19344

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

EUVD-2026-54913

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-71409 No Authentication for Very High Frequency Data Link messages used in CPDLC

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...

PT-2026-69106

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Lack of authentication for Very High Frequency Data Link VHFDL messages allows rogue ground stations to inject Controller-Pilot Data Link Communications CPDLC...

CVE-2026-19069 itsourcecode Hospital Management System treatmentrecord.php sql injection

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-19062 chiuwingyan house selectall.action sql injection

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-19041 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...

EUVD-2026-53867

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function newqoslimitstart of the file /etc/qoslimit. The manipulation of the argument newqoslimitenable leads to os command injection. The attack may be initiated remotely. The exploit is publicly available a...

CVE-2026-19021

SourceCodester Computer Repair Shop Management System 1.0 is affected by a remote SQL injection in the file /classes/Master.php?f=delete_product, caused by manipulated ID parameter. The vulnerability can be exploited without authentication and has publicly disclosed exploit details. No patch/reme...

CVE-2026-8478

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...

CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection

A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

CVE-2026-18613

A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.setconfig of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the...