39646

39646 WordPress 플러그인 Advanced Video 1.0 - 로컬 파일 포함 업데이트 원본 크레딧은 evait security GmbH에 있습니다. 이 스크립트는 원본 익스플로잇의 더 강력한 버전입니다...

CVE-2025-39436

🚨 WordPress 플러그인 익스플로잇: CVE-2025-39436 📝 설명 "I Draw " WordPress 플러그인에 위험한 유형의 파일 무제한 업로드 취약점이 존재합니다. 이 익스플로잇을 통해 공격자는 제한 없이 악성 파일을 업로드할 수 있습니다. 이 문제는 I Draw 버전 1.0까지 영향을 미칩니다. 🛠️ 익스플로잇 세부 정보 이 익스플로잇은 플러그인의 파일 업로드 기능을 활용하여 PHP 페이로드를 실행합니다. 다음은 사용된 기본 페이로드입니다: root@kitploit: phpcode = "" 🚀 사용 방법...

CVE-2026-10170-RCE

방문자 관리 시스템 1.0 - SQLi에서 원격 코드 실행까지 공격 체인 취약점 정보...

CVE-2026-37749

CVE-2026-37749 — CodeAstro 간단 출석 관리 시스템 1.0 - SQL 인젝션 세부 정보...

CVE-2026-10243-AUTH

Smart Parking System 1.0 - 인증되지 않은 관리자 핵심 기능 접근 취약점 정보...

CVE-2025-69460

CVE-2025-69460 – Simple Image Gallery 1.0 원격 코드 실행 RCE 인증되지 않은 WriteUp CVE-2025-69460 – ExploitDB 50214...

CVE-2026-82835 caoqianming django-vue-admin file access control

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...

libunwind_CVE-2015-3239

-- mode: Outline - - 이것은 unwind 라이브러리 버전 1.0입니다. 이 라이브러리는 다음과 같은 여러 아키텍처/운영체제 조합을 지원합니다: Linux/x86-64: 잘 작동합니다. Linux/x86: 잘 작동합니다. Linux/ARM: 잘 작동합니다. Linux/IA-64: 완전히 테스트 및 지원됩니다. Linux/PARISC: 잘 작동하지만, C 라이브러리에 unwind 정보가 없습니다. HP-UX/IA-64: 대부분 작동하지만 몇 가지 심각한 제한이 있는 것으로 알려져 있습니다. Linux/AArch64...

CVE-2025-70149-SQL-Injection

CVE-2025-70149 — SQL 인젝션 연구 프로젝트 개요 CVE-2025-70149의 익스플로잇 및 완화 방법을 시연하는 보안 연구 프로젝트로, CodeAstro Membership Management System v1.0의 치명적인 SQL 인젝션 취약점CVSS 9.8/10입니다. CVE 세부 정보...

CVE-2026-82545 itsourcecode Sales and Inventory System sup_searchfrm.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2026-82421 itsourcecode Sales and Inventory System emp_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

CVE-2024-25202

CVE-2024-25202 È stata trovata una vulnerabilità nel sistema di gestione dei visitatori PHPgurukul 1.0. È stata classificata come problematica. La funzionalità interessata dal problema è una funzionalità sconosciuta della barra di ricerca che chiama search-result.php e search-visitor.php. La...

CVE-2026-78656

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/cust_del.php, triggered by manipulation of the ID argument. The flaw can be exploited remotely with low privileges required (authenticated user) and no user interaction, yielding low impact...

CVE-2026-78247

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

CVE-2026-78244

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...

CVE-2026-78244 itsourcecode Real Estate Management System search.php sql injection

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...

CVE-2026-77391 SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...

CVE-2026-75079

CVE-2026-75079 is a SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 , located in the file /edit_subject2.php . The vulnerability is triggered by manipulating the ID argument, allowing a remote, unauthenticated attacker to execute arbitrary SQL queries. CVSS 3.1...

CVE-2026-19344

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

EUVD-2026-54253

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...