298334 matches found
CVE-2026-105302
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-36227
CVE-2026-36227: PoC de traversée de chemin UserName dans Easy Chat Server 3.1 Ce dépôt contient une preuve de concept bénigne pour CVE-2026-36227, un problème de traversée de chemin dans la gestion des inscriptions utilisateur d'Easy Chat Server 3.1. Ce dépôt est destiné uniquement à la recherche...
CVE-2025-27893
CVE-2025-27893: التحكم الخارجي في معلمة ويب مفترضة غير قابلة للتغيير في منصة Archer الوصف في منصة Archer 6 حتى 6.14.00202.10024، يمكن لمستخدم موثق يتمتع بصلاحيات إنشاء السجلات التلاعب بالحقول غير القابلة للتغيير، مثل تاريخ الإنشاء، عن طريق اعتراض وتعديل طلب نسخ عبر URI...
EUVD-2026-92257
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302
A flaw in the User Session Note mapper of the Keycloak identity and access management solution allows for the exposure of sensitive internal credentials. The mapper fails to validate if a requested session note contains federated access tokens from external identity providers. Consequently, a del...
CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105229
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2025-65271
CVE-2025-65271 CVE-2025-65271 के लिए PoC कैसे चलाएँ? node server.js विवरण Azuriom CMS एडमिन डैशबोर्ड में क्लाइंट-साइड टेम्पलेट इंजेक्शन CSTI एक निम्न-विशेषाधिकार उपयोगकर्ता को प्रशासक के सत्र के संदर्भ में मनमाना टेम्पलेट कोड निष्पादित करने की अनुमति देता है। यह उन प्लगइन्स या डैशबोर्ड घटकों के...
CVE-2025-4334
CVE-2025-4334 - सिंपल यूज़र रजिस्ट्रेशन --form तर्क: -u / --url → बेस वर्डप्रेस URL जैसे https://target.com/wordpress/ --form → रजिस्ट्रेशन फॉर्म का पूरा URL जैसे https://target.com/wpr/default-registration/ उदाहरण: python3 CVE-2025-4334.py -u https://example.com/wordpress --form...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229
A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
EUVD-2026-92251
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2021-43858-MinIO
CVE-2021-43858 MinIO exploit ثغرة رفع صلاحيات المستخدم في MinIO CVE-2021-43858 exp طريقة التشغيل: go run exp.go ip port...
CVE-2019-1698
تران كونغ دانه - SVTT - المشرف: لوو فان لان - CVE-2019-1698 - تاريخ البدء: 30/07/2024 افحص الفرق في الكود بين الإصدار الذي يحتوي على الثغرة والإصدار الذي يحتوي على إصلاح الثغرة: مرجع الكود 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php...
cve-2022-46395-qemu
CVE-2022-46395 مختبر QEMU r36p0 يحتوي هذا المستودع على مختبر QEMU/no-Mali لإعادة إنتاج حالة التشغيل المحمولة لـ CVE-2022-46395 ضد سلسلة برنامج تشغيل Arm Mali r36p0. المختبر مخصص للبحث المحلي عن الثغرات واختبار الانحدار. لا يحمل حمولة تصعيد الامتيازات الخاصة بـ Pixel من الاستغلال الأصلي. في وضع...
CVE-2023-38873-G1
🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ النقاط الأساسية: 6.5 متوسط المقياس: CVSS ⚠️ 📌 الوصف هذا المستودع يوضح ثغرة أمنية من نوع Clickjacking موجودة في موقع G1. تسمح الثغرة للمهاجم بتحميل الموقع داخل iframe ، متداخلاً عناصر ضارة لخداع المستخدم. ⚠️ ما هو Clickjacking؟ Clickjacking...