extended-xss-search

Extended XSS Searcher and Finder This is the extended version based on the initial idea already published as "xssfinder". This private version allows an attacker to perform not only GET but also POST requests. Additionally its possible to proxy every request through Burp or another tunnel. First...

CVE-2025-71454

vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrfcheck in include/utils/VteCsrf.php skips csrftoken validation for non-POST requests. Attackers can induce a logged-in user to open a crafted link sending state-changing GET requests, which handlers read fro...

EUVD-2025-211252

vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrfcheck in include/utils/VteCsrf.php skips csrftoken validation for non-POST requests. Attackers can induce a logged-in user to open a crafted link sending state-changing GET requests, which handlers read fro...

PT-2026-137120

vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf check in include/utils/VteCsrf.php skips csrf token validation for non-POST requests. Attackers can induce a logged-in user to open a crafted link sending state-changing GET requests, which handlers read...

CVE-2026-121422

SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass port-specific deny-net rules by using JWKS URLs with implicit default ports. Attackers can configure a JWT or record access method whose JWKS URL omits port 80 or 443,...

EUVD-2026-115907

CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team custom field values. Unauthenticated attackers can paginate GET requests to collect hidden registration data such as emails, phone numbers, and student IDs when...

CVE-2026-121562

The CTFd platform versions 3.1.0 before 3.8.7 is vulnerable to an information disclosure flaw within the /api/v1/teams list endpoint. The root cause is an incorrect authorization (CWE-863) that fails to protect non-public team custom field values. Unauthenticated attackers can exploit this by sen...

CVE-2026-121454 Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests

Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer.handleScimGet that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM endpoints to retrieve...

CVE-2026-121454

Padloc versions through 4.3.0 are vulnerable to a missing authentication flaw in the ScimServer._handleScimGet() function. This vulnerability allows unauthenticated attackers to bypass security by providing any non-empty bearer token. If an attacker knows an organization ID, they can query the Us...

CVE-2026-121422

SurrealDB versions 3.1.0 through 3.3.0 are vulnerable to a Server-Side Request Forgery (SSRF) flaw. The issue arises when database Owners provide a JWKS URL that omits port 80 or 443; the system uses implicit default ports to bypass port-specific deny-net rules . This allows the application to pe...

EUVD-2026-115954

SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass port-specific deny-net rules by using JWKS URLs with implicit default ports. Attackers can configure a JWT or record access method whose JWKS URL omits port 80 or 443,...

CVE-2026-121422 SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass

SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass port-specific deny-net rules by using JWKS URLs with implicit default ports. Attackers can configure a JWT or record access method whose JWKS URL omits port 80 or 443,...

CVE-2026-121422: surrealdb: SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to…

SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass port-specific deny-net rules by using JWKS URLs with implicit default ports. Attackers can configure a JWT or record access method whose JWKS URL omits port 80 or 443,...

PyFlooder

PyFlooder An HTTP Flood Python script that could stop a normal website in 10s How does it work ? It generates a configurable number of random GET requests and sends them to the target Usage pyflooder.py...

CVE-2026-120249

The Thelia Back-office Default Twig Template (versions prior to 1.1.1 ) is vulnerable to a cross-site request forgery (CSRF) vulnerability. The flaw exists in the /admin/product/combinations/update and /admin/product/default-price/update routes because they accept GET requests without performing ...

CVE-2026-120249 Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes

Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/product/combinations/update and /admin/product/default-price/update routes, which accept GET requests without anti-CSRF token checks. Attackers can lure a logged-in administrato...

CVE-2026-120249 Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes

Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/product/combinations/update and /admin/product/default-price/update routes, which accept GET requests without anti-CSRF token checks. Attackers can lure a logged-in administrato...

CVE-2026-120249

Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/product/combinations/update and /admin/product/default-price/update routes, which accept GET requests without anti-CSRF token checks. Attackers can lure a logged-in administrato...

CVE-2026-120249: Thelia Thelia Back-office Default Twig Template: Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the…

Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/product/combinations/update and /admin/product/default-price/update routes, which accept GET requests without anti-CSRF token checks. Attackers can lure a logged-in administrato...

CVE-2026-33340

CVE-2026-33340: SSRF in lollms-webui Overview Field| Detail ---|--- CVE ID| CVE-2026-33340 Vulnerability| Server-Side Request Forgery SSRF Affected Product| ParisNeo/lollms-webui LoLLMs WEBUI Severity| Critical — CVSS 9.1 CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-918:...