Astro SSR - Server-Side Request Forgery

Astro before 5.17.3 and @astrojs/node before 9.5.4 are vulnerable to full-read SSRF due to improper Host header validation in error page rendering, allowing attackers to redirect requests and access internal resources. id: CVE-2026-25545 info: name: Astro SSR - Server-Side Request Forgery author:...

cpanel-xss-177

xss - cpanelCVE-2023-29489 cPanel dans les versions 11.102.0.x 11.102.0.31 / 11.106.0.x 11.106.0.x / 11.108.0.x 11.108.0.13 / 11.109.9999.x 11.109.9999.116 est vulnérable à Reflected Cross-Site Scripting via des requêtes spécialement conçues vers l'ID d'appel web lorsqu'elles sont affichées sur l...

CVE-2023-29489

Introduction Une vulnérabilité de cross-site scripting XSS reflété exploitable a été découverte dans certaines versions de cPanel et a été identifiée comme CVE-2023-29489. Cette vulnérabilité permet aux attaquants d'exécuter du code JavaScript arbitraire sans nécessiter d'authentification. La...

CVE-2025-62168

CVE-2025-62168 — Preuve de concept de fuite de jeton du proxy Squid L'auteur décline toute responsabilité en cas d'utilisation abusive ou de dommages causés par cet outil. La recherche est fournie strictement à des fins éducatives et défensives. Description Ce dépôt contient une preuve de concept...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server Utilisation root@kitploit: $ docker-compose up Utilisation depuis Docker Hub root@kitploit: $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master ·...

CVE-2019-10092

CVE-2019-10092: Cross-Site Scripting limité via la page « Erreur du proxy » dans Apache HTTP Server Dans Apache HTTP Server 2.4.0-2.4.39, un problème limité de cross-site scripting a été signalé affectant la page d'erreur modproxy. Un attaquant pouvait provoquer une malformation du lien sur la pa...

CVE-2019-20372

CVE-2019-20372 Этот репозиторий предназначен только для образовательных целей. /server запустите уязвимый сервер: ./server.sh /exploit.py запустите скрипт эксплойта: python3 exploit.py важно! https://blkcipher.pl/assets/pdfs/2019-12-10-errorpagerequestsmuggling.pdf...

CVE-2017-9822

CVE-2017-9822 DotNetNuke - Exécution de code à distance par désérialisation de cookie RCE Les versions de DotNetNuke DNN entre 5.0.0 et 9.3.0 sont affectées par une vulnérabilité de désérialisation qui conduit à une exécution de code à distance RCE. DotNetNuke utilise le cookie DNNPersonalization...

PT-2026-89679

Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getValidPluginsDependencies. Attackers with write access to the plugins directory can create a plugin with HTML characters in its name to execute arbitrary scripts...

RLSA-2026:64772 Important: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

MiracleLinux 8 : xmlrpc-c-1.51.0-11.el8_10.1 (AXSA:2026-1789:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1789:02 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from t...

Important: Red Hat Security Advisory: xmlrpc-c security update

An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

Important: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

AlmaLinux 8 : xmlrpc-c (ALSA-2026:64772)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64772 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...

Important: Red Hat Security Advisory: xmlrpc-c security update

An update for xmlrpc-c is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

Important: Red Hat Security Advisory: xmlrpc-c security update

An update for xmlrpc-c is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...