EUVD-2026-91476

YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the field parameter of the mail handler. Attackers can craft links whose field value breaks out of the ajax-mail-form action attribute to execute JavaScript in...

CVE-2026-104465

Versions of YesWiki prior to 4.6.7 are vulnerable to a reflected cross-site scripting (XSS) vulnerability. The flaw exists in the mail handler due to improper sanitization of the field parameter . Unauthenticated attackers can craft malicious links where a crafted field value breaks out of the aj...

CVE-2026-104464 YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying an unvalidated actor URL to the Bazar abonnements sync action. Attackers can target internal hosts or cloud metadata endpoints and chain...

CVE-2026-104464 YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying an unvalidated actor URL to the Bazar abonnements sync action. Attackers can target internal hosts or cloud metadata endpoints and chain...

CVE-2026-104464 YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying an unvalidated actor URL to the Bazar abonnements sync action. Attackers can target internal hosts or cloud metadata endpoints and chain...

EUVD-2026-91453

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104442

YesWiki versions prior to 4.6.7 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause is the lack of input validation in the render handler's content parameter , which allows remote attackers to supply a syndication action . This enables the server to fetch arbi...

CVE-2026-104442 YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104442 YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

EUVD-2026-91451

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the valeur action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.p...

CVE-2026-104441

Versions of YesWiki prior to 4.6.7 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause lies in the {{valeur}} action's url parameter, which allows remote attackers to force the server to fetch content from arbitrary hosts and ports. By submitting the action th...

CVE-2026-85494

A flaw was found in Apache Thrift. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending specially crafted requests to applications utilizing affected language bindings. Flawed input parameter processing and resource allocation can trigger...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 CVE-2025-27136 Local-S3 내 XXE에 대한 개념 증명 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + S3 서비스 감지됨 + 버킷 생성 중: xxe-32d14993 + 서버 응답: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + ?location을 통해 파일 검색 중 + 응답: root❌0:0:root:/root:/bin/bash...

CVE-2026-94633

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91401

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP and D...

Poc_CVE-2025-68645

CVE-2025-68645 - Zimbra パストラバーサル脆弱性 📋 概要 CVE-2025-68645 は、Zimbra Collaboration Suite におけるパストラバーサル脆弱性で、認証されていない攻撃者がサーバーのファイルシステムから任意のファイルを読み取ることを可能にします。 脆弱なエンドポイント /h/printconversations?javax.servlet.include.servletpath= 🎯 影響 影響| 深刻度 ---|--- 認証なしのファイル読み取り| 🔴 高 設定情報の開示| 🔴 高 認証情報の漏えい| 🔴 高...

IPFire_2.19_RCE_Authenticated

IPFire 2.19 OINKCODE RCE PoC IPFire 2.19의 ids.cgi 페이지에서 OINKCODE 매개변수를 통해 발생하는 인증된 명령 주입 취약점에 대한 Python 개념 증명PoC입니다. 공인된 보안 테스트 및 교육용 실습 환경에서만 사용하세요. 이 PoC는 소유하고 있거나 명시적 테스트 허가를 받은 시스템에 대해서만 실행하십시오. 작성자는 이 코드로 인한 오용이나 손해에 대해 책임지지 않습니다. 취약점 개요 IPFire 2.19는 /cgi-bin/ids.cgi에서 처리되는 OINKCODE 매개변수에 OS...

CVE-2026-18953

CVE-2026-18953 — PoC awslabs.aws-transform-mcp-serverAWS Transform MCP 서버의 getresource 도구에서 savePath 매개변수를 통한 임의 파일 쓰기arbitrary file write 취약점 | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — 제한된 디렉터리에 대한 경로명의 부적절한 제한 영향받는 버전| awslabs.aws-transform-mcp-server 0.1.0 – 0.1.4 수정된 버전| 0.1.5 CVSS v3.1| 8.6...

CVE-2026-97652

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Query-Parameter Key in all versions up to, and including, 14.16.14 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-94635

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...