290126 matches found
CVE-2026-105706
A cross-site request forgery (CSRF) vulnerability exists in the SourceCodester Drug Recommendation System 1.0 . The flaw is located in an unspecified function, allowing a remote attacker to perform unauthorized actions. The documents indicate that a proof-of-concept exploit is publicly available,...
CVE-2026-105706 SourceCodester Drug Recommendation System cross-site request forgery
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...
CVE-2026-105706 SourceCodester Drug Recommendation System cross-site request forgery
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...
CVE-2026-105705
The SourceCodester Drug Recommendation System 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw via an unknown function in the Admin/add_drug.php file. This vulnerability allows for remote manipulation resulting in XSS. The documents indicate that an exploit has been released to the public a...
EUVD-2026-92948
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
CVE-2026-105703
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...
CVE-2026-105704 SourceCodester Drug Recommendation System Auth Guard improper authentication
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...
EUVD-2026-92949
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...
CVE-2026-105704
A vulnerability exists in SourceCodester Drug Recommendation System 1.0 within the Auth Guard component. The flaw allows for improper authentication by manipulating the user_id argument. This vulnerability can be triggered via a remote attack vector. While specific exploitation links are not prov...
CVE-2026-105704 SourceCodester Drug Recommendation System Auth Guard improper authentication
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument userid leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and migh...
CVE-2025-42957-SAP-S-4HANA-Under-Siege
CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – 무슨 일이 있었나요? 2025년 8월, SAP의 주력 ERP 플랫폼 S/4HANA 에서 RFC 지원 함수 모듈 중 하나에 취약점이 발견되었습니다. 낮은 권한만 가진 공격자가 해당 모듈에 임의의 ABAP 코드를 주입하여 정상적인 권한 검사를 우회하고 시스템 전체를 제어할 수 있습니다. 이 결함은 이론적인 호기심이 아닙니다. 이미 SecurityBridge Threat Research Labs 에서 악용되었으며, 온프레미스 및 프라이빗 클라우드 배포 환경...
CVE-2026-105703 PHPGurukul User Registration & Login and User Management System Change Password change-password.php authorization
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...
CVE-2026-105703
The PHPGurukul User Registration & Login and User Management System 3.3 is vulnerable to an incorrect authorization flaw within the Change Password Handler component. Specifically, an unknown function in the file loginsystem/admin/change-password.php fails to properly validate the currentpassword...
EUVD-2026-92938
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...
CVE-2026-42978-PoC-Research
🛡️ CVE-2026-42978-PoC-Research - Find and Fix Windows Security Risks 👋 Welcome to Your Security Companion This application helps you check if your Windows computer has a specific security weakness called CVE-2026-42978. This weakness involves a part of Windows called Push Notifications WpnService...
globalprotect-ca-cert-ipc
c2us.exe - 로그온한 사용자의 데스크톱 세션에서 실행 중인 사용자로 명령을 실행합니다. 이 경우 권한이 없는 사용자의 데스크톱 세션에서 cmd.exe를 SYSTEM으로 실행합니다. c2us.c - c2us.exe의 소스 코드. epinject.exe - 새 프로세스를 생성하고 해당 엔트리 포인트에 코드를 주입하는 데 사용되는 엔트리 포인트 인젝터입니다. loadgpsend.bin - epinject.exe를 사용하여 PanGPA.exe에 주입되는 페이로드로, 메인 익스플로잇 본체인...
CVE-2025-24076
CVE-2025-24076 Microsoft Windows Cross Device Service 권한 상승 취약점 악용 개요 이 스크립트는 Windows Cross Device Service 의 취약점을 악용하여 Windows 11 , Windows Server 2025 , Windows Server 2022 23H2 Server Core 설치 시스템에서 권한 상승을 허용합니다. CVE: CVE-2025-24076 CVSS v3.1 점수: 7.3 중요 유형: 권한 상승 약점: CWE-284 - 부적절한 접근 제어 공격 경로: ...
CVE-2024-4577
CVE-2024-4577: PHP CGI 설정의 심각한 취약점 PHP의 CGI 모드에서 공격자가 URL 매개변수를 조작하여 임의 명령을 실행할 수 있는 심각한 보안 결함이 존재합니다. 영향을 받는 버전 Windows에서 php-cgi를 실행하는 PHP 7.4.29 및 8.0.19 이전 버전 공격 방법론 공격자는 특수하게 조작된 요청을 PHP CGI 스크립트에 보내 이 취약점을 악용할 수 있습니다. 이러한 요청은 악성 매개변수를 주입하여 임의 명령 실행을 가능하게 합니다. 이는 잠재적으로 전체 시스템 손상으로 이어질 수 있습니다...