CVE-2026-103511 Arbitrary file-write via extension installation in P4Search

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...

CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Отсутствие авторизации у аутентифицированных Подписчик+ произвольное обновление метаданных пользователя Описание Плагин WP Courses LMS – Online Courses Builder, eLearning...

CVE-2021-46073

CVE-2021-46073 Titre de l'exploit : Vehicle Service Management System - 'User List' Cross Site Scripting XSS stocké Auteur de l'exploit : SANU P.L CVE : CVE-2021-46073 CVSS : 4.8 MOYEN Références : https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-105253 itsourcecode Online Admission System Project login1.php sql injection

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-105253

The itsourcecode Online Admission System Project 1.0 is vulnerable to a SQL injection vulnerability in the /admin/login1.php file. The flaw is caused by improper processing of the User argument, which allows an unauthenticated remote attacker to execute arbitrary SQL commands. The exploit has bee...

EUVD-2026-92288

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

WebminRCE-exploit

WebminRCE-exploit CVE-2022-0824, CVE-2022-0829 - Exploit de privilèges du File Manager L'application vulnérable pour tester ce PoC peut être trouvée ici sous forme d'image Docker. Prérequis : Python3 Module Requests Description Vulnérabilité Contrôle d'accès inapproprié permettant l'exécution de...

p4wned

P4WNED CVE-2026-6043 Инструменты для исследования безопасности Perforce Helix Core и шаблоны nuclei. Статья об исследовании: https://morganrobertson.net/p4wned/ Пожалуйста, прочитайте выше для полных подробностей. Только авторизованные цели. Используйте на своих серверах или с явным письменным...

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 Vulnérabilité d'injection d'en-tête d'hôte SISQUALWFM Ce dépôt contient des informations relatives à une vulnérabilité d'injection d'en-tête d'hôte découverte dans SISQUALWFM version 7.1.319.103, qui permet à un attaquant de manipuler les liens de pages web ou de rediriger les...

CVE-2026-105314

Papermerge 3.5.3 is vulnerable to remote code execution (RCE) due to a directory traversal flaw in the /api/documents/upload endpoint. A standard user can exploit this to write a Python .pth file into the site-packages directory. The malicious code within the .pth file is executed automatically d...

CVE-2026-7458

🧨 CVE-2026-7458 – Обход OTP в PickPlugins User Verification Неаутентифицированный обход аутентификации через нестрогое сравнение в REST API проверки OTP PickPlugins User Verification ≤ 2.0.46 📖 Описание Плагин User Verification от PickPlugins для WordPress версии ≤ 2.0.46 содержит критическую...

Exploit-CVE-2011-2523

README : Exploit pour VSFTP 2.3.4 Ce script Python est conçu pour exploiter une vulnérabilité de type backdoor présente dans VSFTP version 2.3.4. L'exploit permet d'obtenir un accès non autorisé au système exécutant cette version particulière de VSFTP. Utilisation Pour utiliser ce script d'exploi...

CVE-2026-105302

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-36227

CVE-2026-36227: PoC de traversée de chemin UserName dans Easy Chat Server 3.1 Ce dépôt contient une preuve de concept bénigne pour CVE-2026-36227, un problème de traversée de chemin dans la gestion des inscriptions utilisateur d'Easy Chat Server 3.1. Ce dépôt est destiné uniquement à la recherche...

CVE-2025-27893

CVE-2025-27893 : Contrôle externe d'un paramètre web supposé immuable dans Archer Platform Description Dans Archer Platform 6 jusqu'à 6.14.00202.10024, un utilisateur authentifié disposant de privilèges de création d'enregistrements peut manipuler des champs immuables, tels que la date de créatio...

EUVD-2026-92257

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302

A flaw in the User Session Note mapper of the Keycloak identity and access management solution allows for the exposure of sensitive internal credentials. The mapper fails to validate if a requested session note contains federated access tokens from external identity providers. Consequently, a del...

CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...