CVE-2026-82625 code-projects Simple Inventory System User Registration register.php cross site scripting

A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Registration. Such manipulation of the argument lastname leads to cross site scripting. The attack may be launched remotely. The exploit has be...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

Review.CVE-2023-5612

CVE-2023-5612 – GitLab SSRF via Webhook URL PoC & Analysis 📌 CVE Overview CVE-ID: CVE-2023-5612 Severity: High CVSS: 8.1 Base Score Type: Server-Side Request Forgery SSRF Component: GitLab CE/EE Webhooks Affected Versions: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888" ...

CVE-2026-82624

code-projects Simple Inventory System 1.0 is affected by an information disclosure vulnerability in the file inventorymanagement.sql , within the Database Backup File Handler component. The specific root cause is described as "some unknown functionality" of that file. The flaw is exploitable remo...

EUVD-2026-68369

A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Database Backup File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The...

CVE-2026-82624 code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure

A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Database Backup File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 Directory Structure root@kitploit: scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB debugging helper script Vulnerability Summary Item| Description ---|--- CVE| CVE-2025-62507 Vulnerability Type|...

CVE-2026-29116

CVE-2026-29116 — Dahua Unauthenticated Remote Denial of Service Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29116 Vendor: Dahua Technology Published: 2026-06-10T06:16:34 UTC Last Modified: 2026-06-10T06:16:34 UTC Source: Dahua Product Security Incident PSI Trust Center...

CVE-2023-41425

RCE for WonderCMS versions v3.2.0 to v3.4.2 WonderCMS versions v3.2.0 to v3.4.2 with XSS vulnerability allow a malicious actor to achieve RCE by uploading a component to the installModule CVE-2023-41425 No need to know the password. Features: Automated exploitation of CVE-2023-41425 Ease of...

volana

volana 马达加斯加语中的月亮 root@kitploit: 使用它 ; 🌚隐藏于; 🌞可被检测到 Shell 命令混淆，以避免 SIEM/检测系统 在渗透测试中，一个重要方面是保持隐秘 。因此，你应该在行动后清除痕迹 。然而，许多基础设施会实时记录命令并发送到 SIEM，这使得事后清理工作变得毫无意义。 volana 提供了一种简单的方法来隐藏在被攻陷机器上执行的命令：它提供了一个自己的 shell 运行环境（输入你的命令，volana 为你执行）。这样你可以在行动过程中清除痕迹 。 使用方法 你需要获取一个交互式...

CVE-2026-8838-RCE

CVE-2026-8838 — Amazon Redshift Python Driver: Remote Code Execution via eval ⚠️ Educational Use Only Research and demonstration project in offensive cybersecurity conducted exclusively for educational and awareness purposes. Any use on systems without explicit authorization is illegal. This...

ChamiloLMS-CVE-2023-4220

ChamiloLMS CVE-2023-4220 Exploit Python exploit for CVE-2023-4220 , an unauthenticated arbitrary file upload vulnerability affecting Chamilo LMS = 1.11.24. The vulnerability is located in Chamilo's BigUpload component. On vulnerable installations, the upload handler allows a PHP file to be upload...

CVE-2025-29602

CVE-2025-29602 - Stored cross site scriptingXSS vulnerabilities in the FlatPress CMS 1.3.1 Description A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS 1.3.1. An attacker with admin privileges can inject a malicious JavaScript payload into the...

CVE-2025-55182-NextJS-RCE-PoC

CVE-2025-55182 React2Shell Reproduction Environment ⚠️ EDUCATIONAL PURPOSE ONLY This repository is created strictly for educational and research purposes. It demonstrates a critical vulnerability in React Server Components Next.js to help developers understand the risks and importance of updating...

CVE-2017-10271

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Writeup I. System Analysis System Log Analysis Detected Service: Oracle WebLogic Server AdminServer belonging to basedomain running in Development Mode. Connection Port: 7001. Supported Protocols: http, t3, iiop, ldap, snmp. Attack Surfa...

CVE-2026-82621

A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can...

EUVD-2026-68367

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

CVE-2026-82623

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...