WeBaCoo

| | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / Web Backdoor Cookie Script-Kit Écrit par : Anestis Bechtsoudis @ bechtsoudis.com Copyright C 2011-2012 Anestis Bechtsoudis Avertissement L'outil est uniquement à des fins de test et ne peut être...

CVE-2026-105920

A SQL injection vulnerability exists in the Student Registration Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located within an unknown function in the student_signup.php file. This vulnerability allows for remote att...

EUVD-2026-93414

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105920 Kusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injection

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105919

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105919

A SQL injection vulnerability exists in the Administrator Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_query function within admin/login.php, where improper handling of the username and pass...

CVE-2026-105919 Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

EUVD-2026-93381

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

ROOT-OS-DEBIAN-12-CVE-2026-41080 CVE-2026-41080 in expat - Patched by Root

Root has patched CVE-2026-41080 in the expat package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-105918

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

EUVD-2026-93372

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

CVE-2026-105918

A SQL injection vulnerability exists in the Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_error function within the login.php file. Attackers can initiate this attack remotely by manipulating...

eternalblue-ms17-010-research

💀 Recherche sur l'exploitation d'EternalBlue MS17-010 Reproduction contrôlée de CVE-2017-0144 — la vulnérabilité SMB à l'origine de la vague de ransomware WannaCry ⚠️ Avertissement : Cette recherche a été menée dans un environnement de laboratoire entièrement isolé et contrôlé, à des fins...

UAC-Elevation-CVE

CVE-2021-31956: Эксплойт повышения привилегий через UAC в Windows Обзор CVE-2021-31956 — это уязвимость обхода UAC User Account Control в Windows, позволяющая злоумышленнику повысить привилегии до SYSTEM без вызова запроса UAC. Данная CVE эксплуатирует недостаток в способе обработки Windows...

Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Vulnerabilities found in IBM Storage Scale affect IBM Cloud Pak System. These vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1 power and IBM Cloud Pak System 2.3.6.2 intel. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven networ...

system_bt_AOSP10_r33_CVE-2020-0377

Стек Bluetooth Fluoride Сборка и запуск на AOSP Просто соберите AOSP - Fluoride уже там по умолчанию. Сборка и запуск на Linux Инструкции для Ubuntu, протестировано на 14.04 с Clang 3.5.0 и на 16.10 с Clang 3.8.0 Загрузка исходного кода mkdir /fluoride cd /fluoride git clone...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Exécution de code à distance zero-click dans le système Android 🚨 "Un seul paquet malveillant peut prendre le contrôle de votre appareil." — Équipe de sécurité Android, Nov 2025 🎯 Aperçu de la vulnérabilité Attribut| Détails ---|--- Identifiant CVE| CVE-2025-48593 Gravité| 🔴...

EUVD-2026-93362

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1 допускает XSS через поля «Имя опекуна», «Отношение опекуна», «Контактный номер опекуна», «Адрес», «Город». Поставщик — PHPGurukul Продукт — https://phpgurukul.com/hostel-management-system V2.1 Тип уязвимости — Межсайтовый скриптинг XSS...