EUVD-2026-91453

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104442 YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104442

YesWiki versions prior to 4.6.7 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause is the lack of input validation in the render handler's content parameter , which allows remote attackers to supply a syndication action . This enables the server to fetch arbi...

CVE-2026-104442 YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104441 YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the valeur action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.p...

EUVD-2026-91451

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the valeur action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.p...

CVE-2026-104441

Versions of YesWiki prior to 4.6.7 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause lies in the {{valeur}} action's url parameter, which allows remote attackers to force the server to fetch content from arbitrary hosts and ports. By submitting the action th...

CVE-2026-85494

A flaw was found in Apache Thrift. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending specially crafted requests to applications utilizing affected language bindings. Flawed input parameter processing and resource allocation can trigger...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 Prueba de concepto para CVE-2025-27136 XXE en Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + Servicio S3 detectado + Creando bucket: xxe-32d14993 + Respuesta del servidor: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + Recuperando archivo mediante ?location +...

CVE-2026-94633

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91401

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP and D...

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilidad de Path Traversal en Zimbra 📋 Resumen CVE-2025-68645 es una vulnerabilidad de path traversal en Zimbra Collaboration Suite que permite a atacantes no autenticados leer archivos arbitrarios del sistema de archivos del servidor. Endpoint Vulnerable...

IPFire_2.19_RCE_Authenticated

IPFire 2.19 OINKCODE RCE PoC Prueba de concepto en Python para la vulnerabilidad de inyección de comandos autenticada en la página ids.cgi de IPFire 2.19 a través del parámetro OINKCODE. Solo para pruebas de seguridad autorizadas y laboratorios de formación. Ejecute este PoC únicamente contra...

CVE-2026-18953

CVE-2026-18953 — PoC Escritura arbitraria de archivos en awslabs.aws-transform-mcp-server servidor MCP de AWS Transform a través del parámetro savePath de la herramienta getresource. | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — Limitación inadecuada de un nombre de ruta a un directorio restringido...

CVE-2026-97652

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Query-Parameter Key in all versions up to, and including, 14.16.14 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-94635

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94633

A vulnerability exists in the Apache Thrift Dart bindings (versions before 0.25.0 ) where an unauthenticated remote attacker can trigger a Denial of Service (DoS) condition. The flaw occurs when sending input with inconsistent length parameters , specifically causing the TBinaryProtocol.readMessa...

CVE-2026-94633 Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91366

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-97652

The WP Statistics WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 14.16.14 . The root cause is insufficient input sanitization and output escaping of the REQUEST_URI Query-Parameter Key. This allows unauthenticated attackers to inject arb...