Driver-RW

Driver-RW CVE-2018-19321 を使用して NT AUTHORITY\SYSTEM に昇格 WIndows 10 v1511 でテスト済み...

CVE-2026-105643 Ghost: Stored XSS via Embed Card Previews

Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored cross-site scripting. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the pos...

CVE-2026-105387 girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

CVE-2026-105387 girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

EUVD-2026-92631

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

CVE-2026-105387

A security flaw exists in the girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5) within the Patient Login Handler component. The vulnerability is located in the mysqli_query function of the cover.php file. By manipulating the uname/psw arguments,...

CVE-2014-4322

pocコードはNexus 5 Android4.4.4で動作します 特権を取得：system-root、https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege の一部として 作者：andy ウェブサイト：https://blog.csdn.net/koozxcv エクスプロイトはシステム特権と特定のSELinuxコンテキストで実行する必要があります。エクスプロイトが成功すると、root権限と「kernel」SELinuxコンテキストを取得します。 バグ情報...

CVE-2026-57239

Foxit PDF Reader LPE Foxit PDF Readerのアップデーターサービスを介してNT AUTHORITY\SYSTEM権限を取得できる、CVE-2026-3775/CVE-2026-3780およびCVE-2026-57239の概念実証エクスプロイトです。 ビルド バイナリをビルドし、ターゲットに配置して実行するだけです。 cargo build --release 使い方 このプログラムには3つの主要エントリーポイントがあります:...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

cve-2019-0808-poc

cve-2019-0808-poc cve-2019-0808-poc 単なるBSOD,OS再起動に使用されます;...

CVE-2026-49878

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92600

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49878

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49878

A logic error in the wpas_handle_robust_av_scs_recv_action function within robust_av.c results in a possible out-of-bounds write . This vulnerability could potentially lead to remote code execution requiring System execution privileges . Exploitation does not require user interaction. No specific...

CVE-2023-49973

CVE-2023-49973 Customer Support System 1.0 - 「customerlist」ページの"email"フィールド/パラメータにおけるクロスサイトスクリプティング（XSS）脆弱性 説明 : Customer Support System 1.0は格納型XSSに対して脆弱です。Customer Support...

CVE-2023-51281

CVE-2023-51281 Customer Support System 1.0 - “firstname”、“lastname”、“middlename”、“contact”、“address” パラメータにおける複数のクロスサイトスクリプティング（XSS）脆弱性 説明 : Customer Support System 1.0 の /customersupport/ajax.php?action=savecustomer における複数のクロスサイトスクリプティング（XSS）脆弱性により、認証済み攻撃者が...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - SAML SSO 우회 fofa: app="ZABBIX-监控系统" && body="saml"...

MAL-2026-17624 Malicious code in documenclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd20318a8d48dc20fee95097373ebd1039481031985164a651d2b68d366565a [email protected] publishes an npm package whose only shipped content is a heavily obfuscated PowerShell script embedded in the README. The script...

KeePass-TriggerLess

KeePass-TriggerLess KeePass 2.53.1 から ECAS Trigger System を削除し、CVE-2023-24055 を修正...

CVE-2024-34833-payroll-management-system-rce

CVE-2024-34833 薪资管理系统RCE（未认证）PoC 通过文件上传实现RCE，针对https://www.sourcecodester.com/php/14475/payroll-management-system-using-phpmysql-source-code.html。文件名前面附加了精确到分钟的时间戳。该脚本尝试使用当前分钟、前一分钟和下一分钟的时间戳来猜测文件名。 漏洞描述...