CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105229

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

CVE-2025-65271

CVE-2025-65271 CVE-2025-65271 के लिए PoC कैसे चलाएँ? node server.js विवरण Azuriom CMS एडमिन डैशबोर्ड में क्लाइंट-साइड टेम्पलेट इंजेक्शन CSTI एक निम्न-विशेषाधिकार उपयोगकर्ता को प्रशासक के सत्र के संदर्भ में मनमाना टेम्पलेट कोड निष्पादित करने की अनुमति देता है। यह उन प्लगइन्स या डैशबोर्ड घटकों के...

CVE-2025-4334

CVE-2025-4334 - सिंपल यूज़र रजिस्ट्रेशन --form तर्क: -u / --url → बेस वर्डप्रेस URL जैसे https://target.com/wordpress/ --form → रजिस्ट्रेशन फॉर्म का पूरा URL जैसे https://target.com/wpr/default-registration/ उदाहरण: python3 CVE-2025-4334.py -u https://example.com/wordpress --form...

CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

EUVD-2026-92251

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

CVE-2026-105229

A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...

CVE-2021-43858-MinIO

CVE-2021-43858 MinIO exploit MinIO उपयोगकर्ता विशेषाधिकार उन्नयन भेद्यता CVE-2021-43858 exp चलाने का तरीका: go run exp.go ip port...

CVE-2019-1698

تران كونغ دانه - SVTT - المشرف: لوو فان لان - CVE-2019-1698 - تاريخ البدء: 30/07/2024 افحص الفرق في الكود بين الإصدار الذي يحتوي على الثغرة والإصدار الذي يحتوي على إصلاح الثغرة: مرجع الكود 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php...

cve-2022-46395-qemu

CVE-2022-46395 QEMU r36p0 लैब यह रिपॉज़िटरी Arm Mali r36p0 ड्राइवर वंशावली के विरुद्ध CVE-2022-46395 की पोर्टेबल ट्रिगर शर्त को पुनः उत्पन्न करने हेतु एक QEMU/no-Mali लैब है। यह लैब स्थानीय भेद्यता अनुसंधान और रिग्रेशन परीक्षण के लिए अभिप्रेत है। इसमें मूल एक्सप्लॉइट का Pixel-विशिष्ट विशेषाधिकार...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ النقاط الأساسية: 6.5 متوسط المقياس: CVSS ⚠️ 📌 الوصف هذا المستودع يوضح ثغرة أمنية من نوع Clickjacking موجودة في موقع G1. تسمح الثغرة للمهاجم بتحميل الموقع داخل iframe ، متداخلاً عناصر ضارة لخداع المستخدم. ⚠️ ما هو Clickjacking؟ Clickjacking...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

مختبر محاكاة ثغرات RRAS في Windows 11 CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ هام – للاستخدام التعليمي والدفاعي فقط هذا الدليل مخصص لإعداد بيئة مختبرية معزولة ومُتحكم بها لفهم ثغرات تجاوز سعة العدد الصحيح في أداة إدارة خدمات التوجيه والوصول عن بُعد RRAS في Windows. لا تستخدم هذه التقنيات...

CVE-2019-18818_CVE-2019-19609

CVE-2019-18818 और CVE-2019-19609 के लिए शोषण इस रिपॉजिटरी में दो कमजोरियों: CVE-2019-18818 और CVE-2019-19609 का शोषण करने के लिए एक Python स्क्रिप्ट है। CVE-2019-18818 यह कमजोरी एक हमलावर को Strapi CMS में एक व्यवस्थापक उपयोगकर्ता का पासवर्ड रीसेट करने की अनुमति देती है। उपयोग 1. लक्ष्य Strapi...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” GNU Inetutils telnetd में गंभीर रिमोट प्रमाणीकरण उल्लंघन 2015 का भूत अब भी उन सबको अपने कब्जे में लेने के लिए लौट आया है जो अब भी टेलनेट चला रहे हैं। शून्य प्रमाणीकरण। एक एनवायरनमेंट वेरिएबल। तुरंत रूट शेल। ⚠️ अवलोकन CVE-2026-24061 GNU Inetutils telnetd ≤ 2.7 में एक...

CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-105180

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of the argument user/tempUser can lead to dynamically-determined object attributes. The attack can be executed...