CVE-2025-8550

CVE-2025-8550 – Exploit XSS atjiu pybbs Descrição Este repositório contém um exploit automatizado de Prova de Conceito PoC para a CVE-2025-8550 , uma vulnerabilidade de Cross‑Site Scripting XSS refletido no atjiu pybbs ≤ v6.0.0. Ele tem como alvo o parâmetro username do endpoint /admin/topic/list...

CVE-2024-6043

CVE-2024-6043 root@kitploit: CVE-2024-6043 CVE-2024-6043 Panoramica Questo strumento Python sfrutta la vulnerabilità CVE-2024-6043, che riguarda il SourceCodester Best House Rental Management System 1.0. La vulnerabilità consente a un attaccante remoto di eseguire un'iniezione SQL tramite il file...

CVE-2021-46108

CVE-2021-46108 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ D-Link Router DSL-2730E - Cross Site Scripting Memorizzato I dispositivi D-Link DSL-2730E CT-20131125 consentono XSS...

CVE-2021-40353

CVE-2021-40353 CVE-2021-40353 Vulnérabilité d'injection SQL dans openSIS 8.0 https://vulners.com/cve/CVE-2021-40353 Une vulnérabilité d'injection SQL existe dans la version 8.0 d'openSIS lorsque MySQL ou MariaDB est utilisé comme base de données de l'application. Un attaquant peut alors émettre l...

Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – RCE Critico in Wing FTP Server 🛡️ 🔎 Panoramica: CVE-2025-47812 è una vulnerabilità critica di esecuzione remota di codice RCE che colpisce Wing FTP Server versioni precedenti alla 7.4.4. È stata scoperta da un ricercatore di sicurezza ed è stata confermata come attivamente...

WingFTP-CVE-2025-47812-illdeed

CVE-2025-47812 - Exploit RCE per Wing FTP Server Questo repository fornisce un proof-of-concept exploit per CVE-2025-47812 , una vulnerabilità di esecuzione remota di comandi RCE in Wing FTP Server. Un attaccante può iniettare ed eseguire comandi di sistema arbitrari basati su Lua abusando del...

CVE-2023-49547

CVE-2023-49547 Customer Support System 1.0 - Bypass del Login tramite SQL Injection Descrizione : Customer Support System 1.0 è vulnerabile a SQL Injection. Una vulnerabilità di SQL injection in Customer Support System 1.0 consente a un attaccante remoto non autenticato di bypassare il processo d...

CVE-2024-35511

PHPGurukul Men Salon Management System 2.0 Willkommen im Repository des PHPGurukul Men Salon Management System 2.0. Dieses Projekt zielt darauf ab, ein robustes System für das Herren-Salon-Management bereitzustellen. Sicherheitslücken CVE-2024-35511 Beschreibung: Angreifbar durch SQL-Injection üb...

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL https://vulners.com/cve/CVE-2022-28452 https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-28452 https://laundry.redplanetcomputers.com/ 1-الوصف: نظام Red Planet Laundry Management System 1.0 معرض لثغرة SQL Injection عبر المعامل...

CVE-2018-14699

CVE-2018-14699 Unauthentifizierte Command Injection in der enableuser-Funktion von DroboAccess v2.1 Verwendung: Starten Sie zuerst einen Listener ncat -nvlp 1337 Führen Sie dann den Exploit aus Beispiel: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='Host für die...

CVE-2025-47812-poC

CVE-2025-47812-poC Wing FTP Server RCE CVE-2025-47812 के लिए सरल शोषण जो कमांड चलाने और रिवर्स शेल प्राप्त करने के लिए है। केवल शैक्षिक उपयोग के लिए। भेद्यता विवरण यह सुरक्षा भेद्यता RCESecurity https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/ द्वारा सार्वजनिक...

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78246 itsourcecode Online Clinic Management System Admin Login login.php sql injection

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78246

A SQL injection vulnerability exists in itsourcecode Online Clinic Management System 1.0 , specifically in the Admin Login component (file success/login.php). The root cause is the unsanitized handling of the Username argument, allowing an unauthenticated remote attacker to inject arbitrary SQL. ...

CVE-2026-78201 itsourcecode Payroll System admin_class.php login sql injection

A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...

CVE-2026-78201

CVE-2026-78201 is a SQL injection vulnerability in itsourcecode Payroll System 1.0 , specifically in the Login function of admin_class.php . The Username parameter is vulnerable to unsanitized input, allowing a remote, unauthenticated attacker to inject arbitrary SQL. The CVSS 3.1 score is 7.3 (H...

CVE-2026-78197

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-78197 SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

EUVD-2026-64731

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-78197

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the file /fos/admin/ajax.php when the action=save_user parameter is set. Manipulating the Username argument allows an unauthenticated remote attacker to inject SQL, potentially leading ...