CVE-2024-36840-Exploit

CVE-2024-36840: Vulnerabilità di SQL Injection in Boelter Blue System Management Versione 1.3 Dettagli dell'Exploit Titolo dell'Exploit : Vulnerabilità di SQL Injection in Boelter Blue System Management versione 1.3 Google Dork Originale : inurl:"Powered by Boelter Blue" non ha funzionato zero ur...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by IBM Tivoli System Automation for Multiplatforms. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the...

CVE-2023-7173

CVE-2023-7173: Stored Cross-Site Scripting XSS im Krankenhausverwaltungssystem Details zur Schwachstelle CVE-ID: CVE-2023-7173 Schwachstellentyp: Stored XSS Betroffene Komponente: Benutzer-Login-Seite Verwundbarer Parameter: Fullname Herstellerdetails: phpgurukul.com Verwundbare Version: Hospital...

CVE-2023-7172

CVE-2023-7172 Überblick Dieses Projekt enthält eine verwundbare Version eines Krankenhausverwaltungssystems Hospital Management System, HMS, das anfällig für SQL-Injection CVE-2023-7172 ist. SQL-Injection ist eine kritische Webanwendungs-Schwachstelle, die schwerwiegende Auswirkungen auf die...

CVE-2026-81625

CVE-2026-81625 is a stack buffer overflow in Greenbone OS and openvas-scanner . A remote attacker with user privileges can execute a malicious or compromised NASL vulnerability test (VT) to trigger the overflow, potentially gaining full access to the system. The vulnerability is rated HIGH with a...

CVE-2026-81625 Stack buffer overflow in Greenbone OS and openvas-scanner

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test VT on the affected products to trigger a stack buffer overflow and gain full access on the compromised system...

CVE-2026-22812-exploit

Strumento Exploit CVE-2026-22812 Toolkit di sfruttamento completo per CVE-2026-22812 - RCE non autenticata OpenCode 🎯 Panoramica Lo Strumento Exploit CVE-2026-22812 è un framework di sfruttamento completo per la vulnerabilità di esecuzione remota di codice non autenticata in OpenCode. Questo...

CVE-2025-1910-WatchGuard-Privilege-Escalation

WatchGuard Mobile VPN with SSL - Escalation dei privilegi del client CVE-2025-1910 Una vulnerabilità di escalation dei privilegi in Mobile VPN with SSL di WatchGuard MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. Servi il file client.wgssl...

system_bt_A10_r33_CVE-2021-0474

Stack Bluetooth Fluoride Compilazione ed esecuzione su AOSP Basta compilare AOSP: Fluoride è presente per impostazione predefinita. Compilazione ed esecuzione su Linux Istruzioni per Ubuntu, testate su 14.04 con Clang 3.5.0 e su 16.10 con Clang 3.8.0 Scaricare il codice sorgente root@kitploit:...

system_bt_A10-r33_CVE-2021-0474

Stack Bluetooth Fluoride Compilazione ed esecuzione su AOSP Basta compilare AOSP: Fluoride è presente per impostazione predefinita. Compilazione ed esecuzione su Linux Istruzioni per Ubuntu, testate su 14.04 con Clang 3.5.0 e su 16.10 con Clang 3.8.0 Scaricare il codice sorgente root@kitploit:...

CVE-2026-20817

CVE-2026-20817 - Windows Error Reporting WER ALPC Privilege Escalation Descrizione Questo repository contiene una Proof-of-Concept PoC per CVE-2026-20817 , una vulnerabilità di escalation dei privilegi locale nel servizio Windows Error Reporting WER. La vulnerabilità consente a un utente...

CVE-2021-46005

CVE-2021-46005 CVE-2021-46005 के बारे में सभी विवरण सॉफ्टवेयर: ऑनलाइन कार रेंटल सिस्टम 1.0 सॉफ्टवेयर लिंक: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html भेद्यता प्रकार: संग्रहीत क्रॉस-साइट स्क्रिप्टिंग प्रभावित घटक: post-avehical पेज में vehicalorcview प्रभा...

CVE-2026-80523

A flaw was found in the Linux kernel. The HDMA Hardware Direct Memory Access clock, responsible for the internal TCM Tightly Coupled Memory access path of the X100 RISC-V core, was not set as critical. This oversight allows the clock to be shut off, which can lead to a system hang, for example,...

CVE-2026-37750

CVE-2026-37750 — School Management System 1.0 - XSS Riflesso Dettagli...

CVE-2026-80541

A flaw was found in the Linux kernel's drm/amdgpu component. A local user could exploit improper validation of Graphics Execution Manager GEM CREATE domain combinations. By combining specific memory domains CPU|GTT|VRAM with special hardware domains DOORBELL, GDS, GWS, or OA, a user could trigger...

EUVD-2026-66979

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...

CVE-2025-56243

CVE-2025-56243 - XSS riflesso in PuneethReddyHC / Event Management System v1.0 Titolo: Cross-Site Scripting XSS riflesso tramite il parametro eventid in register.php Vendor / Repository: PuneethReddyHC / event-management Versione interessata: 1.0 branch/tag master al momento del test Segnalatore:...

CVE-2025-52021

CVE-2025-52021 — SQL Injection cieca basata sul tempo in PuneethReddyHC / Online Shopping System Advanced v1.0 CVE: CVE-2025-52021 Titolo: SQL Injection cieca basata sul tempo tramite il parametro productid in editproduct.php Vendor / Repo: PuneethReddyHC —...

CVE-2025-59287

CVE-2025-59287 WSUS RCE Exploit Automatisierter Exploit für die Schwachstelle zur nicht authentifizierten Remote-Codeausführung in Windows Server Update Services WSUS. Details zur Schwachstelle CVE-ID: CVE-2025-59287 CVSS-Score: 9.8 Kritisch Angriffsvektor: Netzwerk Authentifizierung: Keine...

EUVD-2026-66474

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...