290147 matches found
Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46072 Exploit Title: Vehicle Service Management System - 'Service List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...
xz-backdoor-research
مجموعة أدوات أبحاث CVE-2024-3094 من إعداد Nikolaos Natsopoulos ، مستشار IAM أداة تفاعلية قائمة على المتصفح ترافق تقرير البحث: "CVE-2024-3094: اختراق سلسلة التوريد عبر الهندسة الاجتماعية والتلاعب بنظام البناء في XZ Utils" 10.5281/zenodo.20700609 حول في مارس 2024، تم اكتشاف باب خلفي في XZ Utils...
CVE-2026-36213-poc
CVE-2026-36213: تصعيد الصلاحيات المحلي في محاكي MEmu Android الإصدار 9.2.7.0 https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC بلغة Python للثغرة...
CVE-2026-105254
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...
CVE-2026-105253
A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...
CVE-2026-104806
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...
CVE-2024-57429
CVE-2024-57429 PHPJabbers Cinema Booking System v2.0 के pjActionUpdate फ़ंक्शन में एक क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF कमजोरी है, जो दूरस्थ हमलावरों को एक प्रमाणित व्यवस्थापक को एक अनधिकृत अनुरोध प्रस्तुत करने के लिए धोखा देकर विशेषाधिकार बढ़ाने की अनुमति देती है। प्रभाव: इस CSRF कमजोरी का शोषण...
CVE-2026-89972
A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...
CVE-2026-104811
The Mitel MiVoice Office 400 is vulnerable to remote code execution due to an improper file type validation flaw in the Music on Hold functionality. Located in the web portal on TCP port 443 (Configuration → Services), the application fails to properly restrict uploaded files to the intended WAV ...
CVE-2026-105254
A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located within an unspecified function of the /admin/schoolyear.php file, where manipulation of the sy argument allows for remote exploitation. While an exploit is reported as publicly available, sp...
CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...
EUVD-2026-92297
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...
CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...
CVE-2026-104806
The Mitel MiVoice Office 400 System is vulnerable to a path traversal flaw in the web management portal (TCP port 443) within the Maintenance → System Logs functionality. Due to insufficient validation of user-supplied file paths, an attacker with high privileges can traverse the directory struct...
CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...
CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...
EUVD-2026-92293
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...
CVE-2021-46073
CVE-2021-46073 शोषण शीर्षक: Vehicle Service Management System - 'User List' Stored Cross Site Scripting XSS शोषण लेखक: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM संदर्भ: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...
EUVD-2026-92289
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...
CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...