290097 matches found
CVE-2026-105918
A SQL injection vulnerability exists in the Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_error function within the login.php file. Attackers can initiate this attack remotely by manipulating...
CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
eternalblue-ms17-010-research
💀 EternalBlue MS17-010 शोषण अनुसंधान CVE-2017-0144 का नियंत्रित पुनरुत्पादन — WannaCry ransomware प्रकोप के पीछे SMB कमजोरी ⚠️ अस्वीकरण: यह शोध पूरी तरह से पृथक, नियंत्रित प्रयोगशाला वातावरण में केवल शैक्षिक और शैक्षणिक उद्देश्यों के लिए आयोजित किया गया था। कोई उत्पादन प्रणाली शामिल नहीं थी। अवलोक...
UAC-Elevation-CVE
CVE-2021-31956: استغلال رفع الصلاحيات في Windows UAC نظرة عامة CVE-2021-31956 هو ثغرة تجاوز UAC User Account Control في Windows تتيح للمهاجم رفع الصلاحيات إلى SYSTEM دون إظهار نافذة UAC. تستغل هذه الثغرة خللاً في طريقة تعامل Windows مع مفاتيح التسجيل المرتبطة بنوافذ UAC. كيف تعمل تمكّن الثغرة...
Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities
Summary Vulnerabilities found in IBM Storage Scale affect IBM Cloud Pak System. These vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1 power and IBM Cloud Pak System 2.3.6.2 intel. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven networ...
Blackash-CVE-2025-48593
🚨 CVE-2025-48593 एंड्रॉइड सिस्टम में जीरो-क्लिक रिमोट कोड निष्पादन 🚨 "एक एकल दुर्भावनापूर्ण पैकेट आपके डिवाइस को नियंत्रित कर सकता है।" — Android Security Team, नवंबर 2025 🎯 भेद्यता का स्नैपशॉट गुण| विवरण ---|--- CVE ID| CVE-2025-48593 गंभीरता| 🔴 गंभीर RCE, जीरो-क्लिक CVSS अनुमानित| 9.8 NVD पुष्ट...
EUVD-2026-93362
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...
Security Bulletin: Due to use of QOS.CH logback, IBM Cloud Pak System is affected by server-side request forgery and arbitrary code execution
Summary Due to use of QOS.CH logback IBM Cloud Pak System is affected by server-side request forgery and arbitrary code execution CVE-2024-12801, CVE-2024-12798. Those issues were addressed by IBM Cloud Pak System v2.3.6.2. Vulnerability Details CVEID:CVE-2024-12801 DESCRIPTION: Server-Side Reque...
CVE-2026-84854
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...
CVE-2026-84854
The WibuKey driver for Windows versions below 6.72 contains an out-of-bounds write vulnerability due to insufficient validation of user input when calculating the size of a kernel buffer. This flaw could lead to a system crash or, under unfavorable circumstances, the modification of adjacent kern...
EUVD-2026-93359
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...
CVE-2026-84854 Out of Bound Write on WibuKey for Windows
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...
CVE-2026-84854 Out of Bound Write on WibuKey for Windows
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...
CVE-2024-36991
CVE 2024-36991 एक पथ-ट्रैवर्सल कमजोरी जो हमलावर को सिस्टम से फ़ाइलें पढ़ने की अनुमति देती है। तकनीकी सारांश CVE : 2024-36991 पथ ट्रैवर्सल प्रभावित सिस्टम : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 कानूनी अस्वीकरण यह उपकरण केवल अधिकृत सुरक्षा मूल्यांकन के लिए प्रदान किया गया है। अनधिकृत उपयोग उल्लं...
Security Bulletin: Due to use of Nodejs Express.js, multiple vulnerabilities affect IBM Cloud Pak System[CVE-2024-43796, CVE-2024-43799, CVE-2024-43800]
Summary Multiple vulnerabilities in Send cross-site scripting XSS within the SendStream.redirect, serve-static built-in and response.redirect found in Node.js Express.js which is used by IBM Cloud Pak System. Vulnerabilities were addressed by IBM Cloud Pak System. Vulnerability Details...
Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)
Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 - NRS have been addressed in version 3.0.5.4 Vulnerability Details CVEID:CVE-2026-62574 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Ja...
CVE-2026-98313
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...
CVE-2026-105808
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...
CVE-2026-105809
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...