CVE-2026-93963

itsourcecode Leave Management System 1.0 is vulnerable to SQL injection in the file /module/department/controller.php via manipulation of the DEPTID argument. The attack can be initiated remotely and requires low privileges (CVSS 3.1 score 6.3 – MEDIUM ), with low impact on confidentiality, integ...

EUVD-2026-83652

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2026-93963 itsourcecode Leave Management System controller.php sql injection

A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2015-7547-Research

Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

CVE-2024-24139

CVE-2024-24139: Login System with Email Verification SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24139.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24139/blob/main/CVE-2024-24139.md...

CVE-2024-40498

CVE-2024-40498 Affected Application online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Description The file register.php handles user registration. At line 117, the POST parameters "$address1" and $address2" are unsanitized, unlike the e-mail,...

CVE-2023-49973

CVE-2023-49973 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "email" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor ca...

CVE-2024-34224

Computer Laboratory Management System using PHP and MySQL 1.0 Submitter: Kha Do Vulnerability Cross Site Scripting Description Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject...

CVE-2026-93959

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

CVE-2024-51435

bloodbank A simple csrf poc found on blood bank system v 1.0...

SparstanBoogie

SparstanBoogie's origins were tested reportedly on iOS/iPadOS 15.2 - 16.7 RC 20H18 and 17.0 however, tests have been conducted up to 26.1 26.1. Also any testing on devices above or under whats been reported is welcomed as it may come back in newer devices so theres no reason to shrug off any good...

CVE-2024-48415

CVE-2024-48415 Description itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the lastname, firstname, middlename, address, contactno, email and taxid parameters in new borrowers functionality on the Borrowers page. Vulnerability Type: Cros...

CVE-2024-10557

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: /file/updateprofile.php Vulnerability Description: There is a CSRF vulnerability on this endpoint...

EUVD-2026-83646

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer0/admins/assessments/course/btnfunctions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried...

CVE-2026-93959

A SQL injection vulnerability exists in SourceCodester Online Reviewer Management System 1.0 , specifically in the file /reviewer_0/admins/assessments/course/btn_functions.php. The injection is triggered by manipulating the Course argument. The attack can be carried out remotely with no privilege...

Gladinet CentreStack & TrioFox - Local File Inclusion

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

Spring Cloud Gateway Server Webflux - Broken Access Control

Spring Cloud Gateway Server Webflux contains a vulnerability caused by unsecured and exposed actuator endpoints allowing modification of Spring Environment properties, letting attackers modify configuration, exploit requires unsecured actuator endpoints exposure. id: CVE-2025-41243 info: name:...

St. Joe ERP system - SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...