290077 matches found
CVE-2026-105302
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-36227
CVE-2026-36227: PoC de traversée de chemin UserName dans Easy Chat Server 3.1 Ce dépôt contient une preuve de concept bénigne pour CVE-2026-36227, un problème de traversée de chemin dans la gestion des inscriptions utilisateur d'Easy Chat Server 3.1. Ce dépôt est destiné uniquement à la recherche...
CVE-2025-27893
CVE-2025-27893: Внешний контроль предполагаемого неизменяемого веб-параметра в платформе Archer Описание В платформе Archer версии 6 до 6.14.00202.10024 аутентифицированный пользователь с привилегиями создания записей может манипулировать неизменяемыми полями, такими как дата создания, перехватыв...
EUVD-2026-92257
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302
A flaw in the User Session Note mapper of the Keycloak identity and access management solution allows for the exposure of sensitive internal credentials. The mapper fails to validate if a requested session note contains federated access tokens from external identity providers. Consequently, a del...
CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105229
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2025-65271
CVE-2025-65271 PoC for CVE-2025-65271 How to run? node server.js Description Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard...
CVE-2025-4334
CVE-2025-4334 - Simple User Registration --form Arguments: -u / --url → Base WordPress URL e.g. https://target.com/wordpress/ --form → Full URL of the registration form e.g. https://target.com/wpr/default-registration/ Example: python3 CVE-2025-4334.py -u https://example.com/wordpress --form...
EUVD-2026-92251
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229
A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2021-43858-MinIO
CVE-2021-43858 эксплойт MinIO Уязвимость повышения привилегий пользователя MinIO CVE-2021-43858 exp Способ запуска: go run exp.go ip port...
CVE-2019-1698
TRAN CONG DANH - SVTT - Наставник: LUU VAN LAN - CVE-2019-1698 - Начало: 30/07/2024 Проверьте различия в коде между версией с уязвимостью и версией кода с исправлением уязвимости: Ссылка на код 1:...
cve-2022-46395-qemu
Лаборатория CVE-2022-46395 QEMU r36p0 Этот репозиторий содержит лабораторию QEMU/no-Mali для воспроизведения переносимого условия срабатывания CVE-2022-46395 для линейки драйверов Arm Mali r36p0. Лаборатория предназначена для локального исследования уязвимостей и регрессионного тестирования. Она ...
CVE-2023-38873-G1
🚨 G1 = A05:2021 – Неправильная конфигурация безопасности ClickJacking ⚠️ Базовая оценка: 6.5 СРЕДНИЙ Шкала: CVSS ⚠️ 📌 Описание Этот репозиторий демонстрирует уязвимость безопасности типа Clickjacking , присутствующую на сайте G1. Уязвимость позволяет злоумышленнику загружать сайт внутри iframe ,...
RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111
Windows 11 RRAS 취약점 시뮬레이션 실습 환경 CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ 중요 – 교육 및 방어 목적으로만 사용 이 가이드는 Windows 라우팅 및 원격 액세스 서비스RRAS 관리 도구의 정수 오버플로우 취약점을 이해하기 위해 격리된 제어된 실습 환경 을 구축하기 위한 것입니다. 명시적 승인 없이 어떠한 시스템에서도 이러한 기술을 사용하지 마십시오. 실습 환경이 인터넷이나 프로덕션 네트워크에 접근할 수 없도록 하십시오. 📋 개요 이 실습은 RRAS 관리...