sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

HP System Management Homepage (SMH) v2.x.x.x - Open Redirect

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. id: CVE-2010-1586 info: name: HP System Management Homepage SMH v2.x.x.x - Open...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

GHSA-673Q-MJM6-R5XR vulnerabilities

Vulnerabilities for packages: homepage, peerdb-ui...

CVE-2025-60656

CVE-2025-60656 - Stored Cross-Site Scripting XSS on Homepage | ---|--- Researchers| DotAdrien Severity| 8.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Software| Script Pag Description A stored Cross-Site Scripting XSS vulnerability exists on the homepage via the "Recent Ads" module. The...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, langfuse-fips, gitlab-rails-ce, configurable-http-proxy, langfuse, opensearch-dashboards-fips, prism, semaphore, code-server, azurite, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, kibana, redisinsight, lambda-nodejs, wazuh-dashboard-fip...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, langfuse-fips, gitlab-rails-ce, configurable-http-proxy, langfuse, opensearch-dashboards-fips, prism, semaphore, code-server, azurite, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, kibana, redisinsight, lambda-nodejs, wazuh-dashboard-fip...

GHSA-VCVR-R3JV-PC5J vulnerabilities

Vulnerabilities for packages: homepage, zitadel, peerdb-ui...

GHSA-F596-WHHP-79R4 vulnerabilities

Vulnerabilities for packages: zitadel, azurite, dotstatsuite-supercore, kibana, langfuse-fips, langfuse, pulumi, homepage, librechat, opentelemetry-auto-instrumentations-node, cadence-web...

GHSA-M9GG-HP2V-232J vulnerabilities

Vulnerabilities for packages: zitadel, azurite, dotstatsuite-supercore, kibana, langfuse-fips, langfuse, pulumi, homepage, librechat, opentelemetry-auto-instrumentations-node, cadence-web...

CVE-2026-101915 vulnerabilities

Vulnerabilities for packages: zitadel, azurite, dotstatsuite-supercore, kibana, langfuse-fips, langfuse, pulumi, homepage, librechat, opentelemetry-auto-instrumentations-node, cadence-web...

CVE-2026-101916 vulnerabilities

Vulnerabilities for packages: zitadel, azurite, dotstatsuite-supercore, kibana, langfuse-fips, langfuse, pulumi, homepage, librechat, opentelemetry-auto-instrumentations-node, cadence-web...

CVE-2026-79764

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

EUVD-2026-86199

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764

The web-based server management platform Termix versions 2.5.0 through 2.5.1 is vulnerable to an authenticated Server-Side Request Forgery (SSRF) . The /homepage/proxy endpoint accepts a user-provided URL and passes it to http.get or https.get without a destination allowlist. Specifically, the sr...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764: Server-Side Request Forgery (SSRF)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

PT-2026-97922

Name of the Vulnerable Software and Affected Versions Termix versions 2.5.0 through 2.5.0 Description The '/homepage/proxy' endpoint accepts a url query parameter from an authenticated user and passes it to http.get or https.get without destination restrictions. In the file...