POC-CVE-2018-25031

CVE-2018-25031 - Swagger UI 4.1.3以前 被害者に認証コードを入力させ、そのコードを攻撃者に送信するシンプルなPOC（CVE-2018-25031）です。 XSS脆弱性 https://github.com/VictorNS69/swagger-ui-xss と併用できます。 パラメータを見つけ、適切なファイルを指定する必要があります：configUrl にはJSONファイル、url にはYAMLファイルを割り当てます。 例: root@kitploit:...

CVE-2018-25031-PoC

CVE-2018-25031-PoC CVE-2018-25031 の PoC...

CVE-2018-25031-test

이 저장소에는 README가 없습니다...

CVE-2018-25031-SG

このリポジトリには README がありません。...

SSRF-CVE-2018-25031-

このリポジトリには README がありません。...

CVE-2018-25031-test2

このリポジトリには README がありません。...

CVE-2018-25031

このリポジトリには README がありません。...

CVE-2018-25031

このリポジトリには README がありません。...

CVE-2018-25031

このリポジトリには README がありません。...

SwaggerUI-CVE-2018-25031

Swagger UI 취약점 공격 - CVE-2018-25031 Swagger UI 공격 - 사용자 인터페이스UI의 중요 정보 왜곡 CVE-2018-25031. 이 공격 도구는 사용 중인 Swagger UI가 사용자 인터페이스UI의 중요 정보 왜곡 취약점에 취약한지 확인합니다. 요구 사항 Python 3 Selenium Chrome Webdriver 처음 사용 Selenium 설치 root@kitploit: pip install selenium 저장소 복제 root@kitploit: git clone...

CVE-2018-25031

このリポジトリには README がありません。...

Security Bulletin: Due to the use of Swagger UI, IBM Security SOAR is vulnerable to spoofing attacks..

Summary IBM Security SOAR uses Swagger-UI internally. CVE-2025-25031 Vulnerability Details CVEID:CVE-2018-25031 DESCRIPTION: Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this...

Exploit for Improper Input Validation in Smartbear Swagger_Ui

swagger-ui POC for Testing HTML Injection in Swagger UI CVE-...

Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data Version is affected by multiple vulnerabilties

Summary Mutiple open source vulnerabilties affects Watson Machine Learning Accelerator on Cloud Pak for Data Version 2.3.3 and have been addressed in version 2.3.4. Vulnerability Details CVEID:CVE-2021-23566 DESCRIPTION: Nanoid could allow a local attacker to obtain sensitive information, caused ...

Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may vulnerable to denial of service, spoofing attacks via dependent JavaScript libraries (CVE-2021-23440, CVE-2018-25031, CVE-2022-46175, CVE-2022-37599, CVE-2022-37603)

Summary IBM Storage Fusion and IBM Storage Fusion HCI, previously known as Spectrum Fusion and Spectrum Fusion HCI, may be affected by vulnerabilities in set-value Node.js, swagger-ui, JSON5, webpack/loader-utils. Vulnerabilities include access of resources using improper type leading to denial o...

Security Bulletin: Open Source Dependency Vulnerability

Summary IBM Edge Application Manager 4.5 has resolved the vulnerability. Vulnerability Details CVEID:CVE-2018-25031 DESCRIPTION: swagger-ui could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a specially-crafted URL, an attacker could exploit this vulnerabili...

Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information

Exploit Title: Swagger UI 4.1.3 - User Interface UI Misrepresentation of Critical Information Date: 14 April, 2023 Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://swagger.io/ Version: 4.1.3 CVE: CVE-2018-25031 Site: https://rafaelcintralopes.com.br/ Usage: python swagger-exploit.py...

Swagger UI 4.1.3 Critical Information Misrepresentation

Exploit Title: Swagger UI 4.1.3 - User Interface UI Misrepresentation of Critical Information Date: 14 April, 2023 Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://swagger.io/ Version: 4.1.3 CVE: CVE-2018-25031 Site: https://rafaelcintralopes.com.br/ Usage: python swagger-exploit.py...

Security Bulletin: Swagger-ui as used by IBM QRadar Advisor With Watson App is vulnerable to spoofing attacks (CVE-2018-25031)

Summary Swagger-ui as used by IBM QRadar Advisor With Watson App is vulnerable to spoofing attacks. IBM has addressed the relevant vulnerability. Vulnerability Details CVEID:CVE-2018-25031 DESCRIPTION: swagger-ui could allow a remote attacker to conduct spoofing attacks. By persuading a victim to...

Security Bulletin: Vulnerabilites CVE-2018-25031 and CVE-2021-46708 in WebSphere Application Server Liberty affect IBM CICS TX Standard

Summary WebSphere Application Server Liberty is used by IBM CICS TX Standard to provide a web based administration console and to provide web services support. The fix removes vulnerabilities CVE-2018-25031 that allows a remote attacker to conduct spoofing attacks and CVE-2021-46708 that allows a...