EUVD-2026-88758

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

CVE-2026-7192 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

CVE-2026-7192 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

CVE-2023-31719

CVE-2023-31719 Возможно внедрение SQL-кода в JSON-параметр "username" из точки входа /api/signin через HTTP POST-запрос "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" Название затронутого продукта: FUXA Затронутая версия: = 1.1.12...

CVE-2024-38856

CVE-2024-38856 Apache Ofbiz — сканер RCE Описание Этот скрипт предназначен для сканирования на наличие уязвимости CVE-2024-38856 в приложениях Apache Ofbiz, которая может позволить удаленное выполнение кода. Он отправляет HTTP POST-запросы на определенные пути внутри приложения Ofbiz с вредоносны...

Citrix-ADC-RCE-CVE-2020-8193

Citrix ADC RCE 0x01 CreateSession request POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1 Host: 192.168.3.18:9080 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/76.0.3809.132 Safari/537.36...

Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation

인시던트 분석: Check Point Security Gateway CVE-2024-24919 악용 시도 📌 경영진 요약 2024년 6월 6일 오후 3시 12분, 보안 모니터링 시스템이 Check Point Security GatewayCP-Spark-Gateway-01, IP: 172.16.20.146를 대상으로 한 높은 심각도의 악용 시도에 대한 경보를 트리거했습니다. 외부 공격자는 IP 203.160.68.12에서 운영되며, 디렉터리 트래버설...

CVE-2017-15220-vxsearch-rce

CVE-2017-15220 – Удаленное переполнение буфера в VX Search Enterprise Уязвимость удаленного переполнения буфера в VX Search Enterprise 10.1.12. Детали уязвимости CVE: CVE-2017-15220 Продукт: VX Search Enterprise Версия: 10.1.12 Воздействие: Удаленное выполнение кода Описание VX Search Enterprise...

w48crash

WebMod 스택 버퍼 오버플로 CVE-2007-1260 작성: cybermind Kevin Masterson [email protected] WebMod 사이트 아카이브: https://web.archive.org/web/20080517044559/http://djeyl.net/w.php 취약한 버전: 0.48, Win32 및 Linux 모두. 이전 버전도 취약할 수 있습니다. 이것은 HLDS의 모든 버전에서 작동합니다. 취약점 유형: DoS, HLDS가 실행 중인 사용자 권한 하의 원격 코드 실행. 설명: HTTP...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the getValidUrl process in the webhook connector, which fails to properly validate hostnames and private IP ranges. An attacker can cause the server to send unauthorized HTTP POST requests to interna...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2026-100697

Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to pre-authentication server-side request forgery. An unauthenticated attacker can submit authdriver=clickhouse with authserver set to an arbitrary U...

CVE-2026-100697 Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver

Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to pre-authentication server-side request forgery. An unauthenticated attacker can submit authdriver=clickhouse with authserver set to an arbitrary U...

CVE-2026-54544

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...

CVE-2026-57139 PraisonAI MCPServer exposes unauthenticated HTTP tools/call

PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp in src/praisonai-ts/src/mcp/server.ts binds without a host restriction and forwards every HTTP POST request to handleRequest without authentication or authorization. Any network client that can reach the port can...

PT-2026-93114

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @login required decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...

VulnCheck KEV: CVE-2026-23536

A security issue was discovered in the Feast Feature Server's /read-document endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a specially crafted HTTP POST request, an attacker can bypass intended access restrictions to...

The vulnerability of the Vesta Control Panel server’s control panel allows a hacker to execute arbitrary commands.

The vulnerability of the Vesta Control Panel’s control panel lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the vsftplicense parameter when sending HTTP POST requests to the...

Server-side Request Forgery (SSRF)

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

Missing Authentication for Critical Function

Overview icecoder/icecoder is a Browser based code editor allowing you to code from anywhere. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the terminal-xhr.php process. An attacker can execute arbitrary operating system commands by sending a...