CVE-2026-105706 SourceCodester Drug Recommendation System cross-site request forgery

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...

CVE-2025-32434

CVE-2025-32434: PyTorch RCE脆弱性 - PoC CVE-2025-32434とは？ CVE-2025-32434 は、深層学習やニューラルネットワークで広く使用されるPythonライブラリPyTorchにおける、重大なリモートコード実行（RCE）脆弱性です。 中心的な問題...

CVE-2026-105705

The SourceCodester Drug Recommendation System 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw via an unknown function in the Admin/add_drug.php file. This vulnerability allows for remote manipulation resulting in XSS. The documents indicate that an exploit has been released to the public a...

EUVD-2026-92948

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105703

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

CVE-2026-105621

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...

CVE-2026-105611

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint. This manipulation of the argument ID causes...

react2shell-toolkit

Next.js RCE 评估工具包 一个用于在授权环境中验证和调查 CVE-2025-55182（也称为 React2Shell ）的 Python 工具包。该漏洞影响 React 服务端组件，并可能使基于 Next.js 等框架构建的应用程序暴露于未经身份验证的远程代码执行。该工具包集成了目标收集、批量验证、交互式测试 Shell、主机枚举以及可选的后验证工具。 漏洞 CVE: CVE-2025-55182 名称: React2Shell 类型: 未经身份验证的远程代码执行 受影响技术: React 服务端组件及依赖框架，包括受影响的 Next.js 配置 工具包验证:...

CVE-2026-39987-PoC

CVE-2026-39987 PoC 概述 Marimo = 0.20.4 受 /terminal/ws WebSocket 端点中一个预认证 RCE 漏洞的影响。 该端点会检查应用模式和终端支持情况，但在接受 WebSocket 连接之前不会验证身份认证 。随后它会创建一个 PTY shell，允许未认证的攻击者以 Marimo 进程的权限执行命令。 根本原因 与其他调用 validateauth 的 WebSocket 端点不同，易受攻击的终端端点直接接受连接： if appstate.mode != SessionMode.EDIT: await websocket.close...

misfortune-cookie

CVE-2014-9222 “Misfortune Cookie” PoC 套件 AllegroSoft RomPager 的 HTTP cookie 处理中存在栈溢出（所有版本 4.34）。单个未认证请求携带精心构造的 Cookie: 头即可破坏内存。影响：管理员认证绕过、DoS/重启，以及（配合固件特定偏移量）远程代码执行。 仅可对您拥有或明确获授权测试的硬件使用。 交互式控制台（推荐） python3 main.py 然后使用 1 设置目标 python3 main.py http://192.168.1.1 1 设置 / 切换目标 2 指纹识别目标 3 检测漏洞（安全，非破坏性）...

CVE-2026-105704 SourceCodester Drug Recommendation System Auth Guard improper authentication

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

EUVD-2026-92949

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

CVE-2026-105704

A vulnerability exists in SourceCodester Drug Recommendation System 1.0 within the Auth Guard component. The flaw allows for improper authentication by manipulating the user_id argument. This vulnerability can be triggered via a remote attack vector. While specific exploitation links are not prov...

CVE-2026-105704 SourceCodester Drug Recommendation System Auth Guard improper authentication

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts Patch-Gap Auditor A small Python tool that finds Apach...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift NGINXにおける重大なヒープベースのバッファオーバーフロー 📌 概要 CVE-2026-42945 （別名 NGINX Rift ）は、NGINXの ngxhttprewritemodule における重大な セキュリティ脆弱性です。 タイプ : ヒープベースのバッファオーバーフロー CWE-122 発見 : 2026年5月 存在期間 : 約18年間 悪用可能性 : 単一の細工されたHTTPリクエストにより、リモートから認証なしで可能...

wp2shell

🔍 wp2shell - WordPress CVE-2026-63030 漏洞扫描器与利用工具 ⚡ 针对 CVE-2026-63030 wp2shell 的快速实时漏洞扫描器与利用工具 📌 概述 wp2shell 是一个用于检测和利用 CVE-2026-63030 的综合性工具包，该漏洞是 WordPress 中的一个严重漏洞，允许未经身份验证的攻击者通过 REST API 批量路由混淆结合 SQL 注入来执行远程代码。 🔍 什么是 CVE-2026-63030？ CVE-2026-63030（wp2shell）是由 Adam Kues （Assetnote / Searchlight...

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution このリポジトリは、Windows 上の Apache Tomcat 9.0.17 における CVE-2019-0232 脆弱性を再現するための Docker ベースのラボ環境を提供します。 脆弱性概要 CVE-2019-0232 は、Windows 上で動作する Apache Tomcat CGI Servlet におけるリモートコード実行の脆弱性です。この問題は、enableCmdLineArguments パラメータが true...