5782 matches found
attackmapper
AttackMapper Attack Path Visualization & Threat Intelligence Platform Features • Installation • Usage • Threat Intel • Contributing Overview AttackMapper is a CLI tool for red team operations that generates attack paths, maps techniques to the MITRE ATT&CK framework, and integrates real-time thre...
vulnerability_advisories
Onapsis Security Advisories This repository contains Security Advisories for vulnerabilities reported by the Onapsis Research Labs team Advisories Summary The following table is a summary of the vulnerabilties described in this repository: Vendor| CVE| CVSS| Description| Link to Report...
CVE-2026-102912
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...
CVE-2026-102912 SourceCodester Online Leave Management System page reports sql injection
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...
CVE-2026-102912
The SourceCodester Online Leave Management System 1.0 is vulnerable to a SQL injection flaw in the /admin/?page=reports endpoint. The root cause involves improper handling of the date_start and date_end arguments, which allows for remote exploitation. The documents indicate that an exploit is pub...
EUVD-2026-89607
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...
CVE-2026-102912 SourceCodester Online Leave Management System page reports sql injection
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...
EUVD-2026-89473
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability...
CVE-2026-102912: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...
PT-2026-103018
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date start/date end leads to sql injection. Remote exploitation of the attack is possible. The exploit...
CVE-2026-72507
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability...
CVE-2026-72507
The Toptech TMS7 and TopHAT systems are susceptible to a time-based blind SQL injection vulnerability. This flaw exists within the "reportType" parameter of the product summary report feature, specifically located in the balancing reports section. The vulnerability allows for unauthorized databas...
Uncontrolled Resource Consumption
Apache Struts is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to unrestricted reading of Content Security Policy violation reports into memory, which allows an unauthenticated attacker to submit an oversized report and exhaust the application's heap, causing a...
A Competing-Hazards Systematization of Loss of Control in Autonomous Agents
Leading AI developers have reported agents acting beyond their approved limits, which a United Nations panel described as an early warning of loss of human control. Yet incident reports and agent-safety evaluations describe these events differently, making it difficult to compare failures, trace...
CVE-2026-72507: Improper Neutralization of Special Elements used in an SQL Command
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability...
CVE-2026-97538
A flaw was found in the Linux kernel's ASUS ROG RYUJIN hardware monitoring driver. The driver fails to validate the length of incoming Human Interface Device HID reports before parsing response headers and data fields. An attacker capable of supplying truncated HID reports can cause the driver to...
honeypot-stuff
honeypot-stuff I am a ho...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU Bison vulnerability (USN-8777-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8777-1 advisory. It was discovered that GNU Bison incorrectly handled grammar-defined configuration variables when generating HTML reports. An attacker cou...