Exploit for Injection in Dlink Dir-868L_B1_Firmware

CVE-2025-14659: D-Link DHCP Hostname Command Injection An Off...

CVE-2026-90015

A flaw was found in the Linux kernel's xHCI eXtensible Host Controller Interface driver. This vulnerability occurs when the driver processes large, fragmented USB data transfers, leading to incorrect handling of memory buffers. An attacker with local access or a malicious USB device could exploit...

CVE-2026-93185

A flaw was found in the Linux kernel's audio subsystem, specifically within the SoundWire SDW driver for the rt700 codec. This vulnerability arises when a SoundWire device is removed, as the system may fail to properly cancel all pending tasks associated with the device. Consequently, an active...

CVE-2026-49878

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-105387

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

CVE-2019-16098

CVE-2019-16098 This CVE exploits the RTCore64.sys driver and creates a cmd.exe process with system privileges by copying the token of the System process with one of the low-privilege cmd.exe process. Blog about the approach and the methodology can be found here...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - تضمين الملفات المحلية الوصف : Customer Support System 1.0 عرضة لثغرة تضمين الملفات المحلية Local File Inclusion. يمكن للمستخدم المُصادَق عليه الوصول إلى ملفات PHP وقراءتها من نظام التشغيل عبر استغلال ثغرة تضمين الملفات المحلية LFI من خلال مرشح الغلاف...

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - ثغرة في البرمجة النصية عبر المواقع XSS في معامل "tname" في "newterm" الوصف : تسمح ثغرة في البرمجة النصية عبر المواقع XSS في المكون "newterm" من School Fees Management System 1.0 للمهاجمين بتنفيذ نصوص برمجية عشوائية أو HTML عبر إدخال حمولة خبيثة ...

Driver-RW

Driver-RW الارتقاء إلى NT AUTHORITY\SYSTEM باستخدام CVE-2018-19321 تم الاختبار على WIndows 10 v1511...

CVE-2026-105643 Ghost: Stored XSS via Embed Card Previews

Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored cross-site scripting. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the pos...

CVE-2026-105387 girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

CVE-2026-105387 girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

EUVD-2026-92631

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

CVE-2026-105387

A security flaw exists in the girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5) within the Patient Login Handler component. The vulnerability is located in the mysqli_query function of the cover.php file. By manipulating the uname/psw arguments,...

CVE-2014-4322

رمز الإثبات PoC يعمل على Nexus 5 بنظام Android 4.4.4 الحصول على الصلاحيات: system - root، كجزء من https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege المؤلف: andy الموقع: https://blog.csdn.net/koozxcv يجب تنفيذ الاستغلال exploit بصلاحية النظام system وسياق SELinux محدد. إذا نجح...

CVE-2026-57239

Foxit PDF Reader LPE إثبات مفهوم لاستغلال الثغرات CVE-2026-3775/CVE-2026-3780 و CVE-2026-57239 والتي تسمح لك بالحصول على صلاحيات NT AUTHORITY\SYSTEM عبر خدمة تحديث Foxit PDF Reader. بناء قم ببناء الملف الثنائي، ثم ضعه على الهدف وقم بتشغيله. cargo build --release الاستخدام يحتوي البرنامج على ثلاث...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

cve-2019-0808-poc

cve-2019-0808-poc cve-2019-0808-poc مجرد BSOD، يُستخدم لإعادة تشغيل نظام التشغيل;...

CVE-2026-49878

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49878

A logic error in the wpas_handle_robust_av_scs_recv_action function within robust_av.c results in a possible out-of-bounds write . This vulnerability could potentially lead to remote code execution requiring System execution privileges . Exploitation does not require user interaction. No specific...