Exploit for Injection in Dlink Dir-868L_B1_Firmware

CVE-2025-14659: D-Link DHCP Hostname Command Injection An Off...

CVE-2026-90015

A flaw was found in the Linux kernel's xHCI eXtensible Host Controller Interface driver. This vulnerability occurs when the driver processes large, fragmented USB data transfers, leading to incorrect handling of memory buffers. An attacker with local access or a malicious USB device could exploit...

CVE-2026-93185

A flaw was found in the Linux kernel's audio subsystem, specifically within the SoundWire SDW driver for the rt700 codec. This vulnerability arises when a SoundWire device is removed, as the system may fail to properly cancel all pending tasks associated with the device. Consequently, an active...

CVE-2026-49878

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-105387

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

CVE-2019-16098

CVE-2019-16098 Esta CVE explota el driver RTCore64.sys y crea un proceso cmd.exe con privilegios del sistema copiando el token del proceso System a uno de los procesos cmd.exe de bajo privilegio. El blog sobre el enfoque y la metodología se puede encontrar aquí...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Local File Inclusion Description : Customer Support System 1.0 is vulnerable to Local File Inclusion. An authenticated user has the capability to access and read PHP files from the operating system by exploiting a Local File Inclusion LFI vulnerability...

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el parámetro "tname" en "newterm" Descripción : Una vulnerabilidad de Cross-Site Scripting XSS en el componente “newterm” de School Fees Management System 1.0 permite a los atacantes ejecutar scripts...

Driver-RW

Driver-RW Elevate to NT AUTHORITY\SYSTEM with CVE-2018-19321 Tested on WIndows 10 v1511...

CVE-2026-105643 Ghost: Stored XSS via Embed Card Previews

Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored cross-site scripting. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the pos...

CVE-2026-105387 girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

CVE-2026-105387 girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

EUVD-2026-92631

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

CVE-2026-105387

A security flaw exists in the girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5) within the Patient Login Handler component. The vulnerability is located in the mysqli_query function of the cover.php file. By manipulating the uname/psw arguments,...

CVE-2014-4322

El código PoC funciona en Nexus 5 con Android 4.4.4 Escalada de privilegios: system-root, como parte de https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege autor: andy sitio web: https://blog.csdn.net/koozxcv El exploit debe ejecutarse con privilegios de sistema y varios...

CVE-2026-57239

Foxit PDF Reader LPE إثبات مفهوم لاستغلال الثغرات CVE-2026-3775/CVE-2026-3780 و CVE-2026-57239 والتي تسمح لك بالحصول على صلاحيات NT AUTHORITY\SYSTEM عبر خدمة تحديث Foxit PDF Reader. بناء قم ببناء الملف الثنائي، ثم ضعه على الهدف وقم بتشغيله. cargo build --release الاستخدام يحتوي البرنامج على ثلاث...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

cve-2019-0808-poc

cve-2019-0808-poc cve-2019-0808-poc solo BSOD,usado para reiniciar SO;...

CVE-2026-49878

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49878

A logic error in the wpas_handle_robust_av_scs_recv_action function within robust_av.c results in a possible out-of-bounds write . This vulnerability could potentially lead to remote code execution requiring System execution privileges . Exploitation does not require user interaction. No specific...