CVE-2026-105919

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105919 Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105919 Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105919

A SQL injection vulnerability exists in the Administrator Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_query function within admin/login.php, where improper handling of the username and pass...

EUVD-2026-93381

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105919 Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

ROOT-OS-DEBIAN-12-CVE-2026-41080 CVE-2026-41080 in expat - Patched by Root

Root has patched CVE-2026-41080 in the expat package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-105918

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

EUVD-2026-93372

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

CVE-2026-105918

A SQL injection vulnerability exists in the Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_error function within the login.php file. Attackers can initiate this attack remotely by manipulating...

CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

eternalblue-ms17-010-research

💀 EternalBlue（MS17-010）エクスプロイト研究 CVE-2017-0144の制御された再現 ― WannaCryランサムウェアの原因となったSMB脆弱性 ⚠️ 免責事項：この研究は、完全に隔離された制御されたラボ環境で、学術および教育目的のみのために実施されました。本番システムは一切関与していません。 概要 本プロジェクトは、サンドボックス化されたAWS EC2環境でEternalBlueエクスプロイト（CVE-2017-0144、CVSS...

UAC-Elevation-CVE

CVE-2021-31956: Windows UAC 特権昇格エクスプロイト 概要 CVE-2021-31956 は、Windows における UAC ユーザーアカウント制御 バイパスの脆弱性であり、攻撃者が UAC プロンプトをトリガーすることなく SYSTEM へ特権を昇格できるようにする。この CVE は、Windows が UAC プロンプトに関連するレジストリキーを処理する方法の欠陥を悪用する。 仕組み この脆弱性により、攻撃者は UAC...

Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Vulnerabilities found in IBM Storage Scale affect IBM Cloud Pak System. These vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1 power and IBM Cloud Pak System 2.3.6.2 intel. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven networ...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 안드로이드 시스템 제로클릭 원격 코드 실행 🚨 "단 하나의 악성 패킷이 당신의 기기를 장악할 수 있습니다." — Android Security Team, 2025년 11월 🎯 취약점 스냅샷 속성| 세부 내용 ---|--- CVE ID| CVE-2025-48593 심각도| 🔴 치명적 RCE, 제로클릭 CVSS 추정| 9.8 NVD 확인 중 공격 경로| 🌐 네트워크 원격 사용자 상호작용| ❌ 필요 없음 필요 권한| ❌ 없음 익스플로잇 상태| 🟡 공개 PoC 없음 2025년 11월 4일 기준 🛡️ 영향받...

EUVD-2026-93362

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

Security Bulletin: Due to use of QOS.CH logback, IBM Cloud Pak System is affected by server-side request forgery and arbitrary code execution

Summary Due to use of QOS.CH logback IBM Cloud Pak System is affected by server-side request forgery and arbitrary code execution CVE-2024-12801, CVE-2024-12798. Those issues were addressed by IBM Cloud Pak System v2.3.6.2. Vulnerability Details CVEID:CVE-2024-12801 DESCRIPTION: Server-Side Reque...

CVE-2026-84854

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...

CVE-2026-84854

The WibuKey driver for Windows versions below 6.72 contains an out-of-bounds write vulnerability due to insufficient validation of user input when calculating the size of a kernel buffer. This flaw could lead to a system crash or, under unfavorable circumstances, the modification of adjacent kern...