CVE-2024-5961

CVE-2024-5961 XSS réfléchie dans 2ClickPortal Version: de 7.2.31 à 7.6.4. intext:"Powered by 2ClickPortal" PoC root@kitploit: https://domain/szukaj/?searchlang=pl&search=all&string=" onfocus=alert1 autofocus="...

CVE-2024-1112

CVE-2024-1112 هذا إثبات مفهوم PoC كتبته لثغرة تجاوز سعة الكومة Heap Overflow في "ResHacker.exe". الاستخدام قم بتشغيل CVE-2024-1112.py، ثم انسخ كل النص الموجود في payload.txt الذي تم إنشاؤه، واستخدمه كمعامل لفتح ResHacker.exe. root@kitploit: ResHacker.exe $string ملاحظة: لا تنسَ العثور على العنوان...

CVE-2026-66832

When the Mira Android app opens in-app WebView content e.g., shop redirect flows, the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent header. Both are then transmitted to third-party web...

PT-2026-70927

When the Mira Android app opens in-app WebView content e.g., shop redirect flows, the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent header. Both are then transmitted to third-party web...

EUVD-2026-49639

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

PT-2026-35923

TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function...

VulnCheck KEV: CVE-2022-31208

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary commands by manipulating the cmdstring URL parameter...

CVE-2025-50402

FAST FAC1200R F400FAC1200RQ is vulnerable to Buffer Overflow in the function sub80435780 via the parameter string facpassword...

PT-2025-48152

Name of the Vulnerable Software and Affected Versions FAST FAC1200R F400 FAC1200R Q affected versions not specified Description The FAST FAC1200R F400 FAC1200R Q is susceptible to a buffer overflow condition. This occurs in the sub 80435780 function through the fac password parameter. The...

Eval Injection

Overview litdb is an A literature database tool with GPT integration. Affected versions of this package are vulnerable to Eval Injection via the parseschemadsl function in the extract.py file, which unsafely uses the eval function. This allows an attacker to execute arbitrary Python code on the...

EUVD-2020-0489

Malware in sbrugna...

EUVD-2016-9426

Malware in sbrugna...

EUVD-2022-2142

Malicious code in bioql PyPI...

EUVD-2025-12096

Malicious code in bioql PyPI...

CVE-2025-57086

Tenda W30E V16.01.0.19 5037 was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda W30E 安全漏洞

Tenda W30E is an enterprise-grade wireless router from Tenda Technology designed for SOHO, small and micro businesses and small stores. The Tenda W30E suffers from a buffer overflow vulnerability that originates from the failure of the String parameter in the formDeleteMeshNode function to...

CVE-2025-55589

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice...

PT-2025-34143 · Elunez · Elunez Eladmin

Name of the Vulnerable Software and Affected Versions: elunez eladmin versions prior to 2.8 Description: A vulnerability exists in the EncryptUtils function within the DES Key Handler component of elunez eladmin. Manipulation of the STR PARAM argument with the input Passw0rd results in inadequate...

WeGIA Denial of Service Vulnerability

WeGIA is a web manager for welfare organizations. WeGIA suffers from a denial of service vulnerability that stems from the length of the errorstr parameter not being validated, which can be exploited by an attacker to cause a denial of service...