CVE-2026-71518

CVE-2026-71518 — Typemill の未認証認可バイパス パス等価な URL バリアントがロール制限付きメディアのダウンロードをバイパス 制限は生のリクエストパスに基づいて判定される一方、ファイルは OS 解決後のパスから読み込まれる — その2つは一致しない 概要 · サマリー · 根本原因 · 攻撃チェーン · エクスプロイト · 対策 · タイムライン 📋 概要 | ---|--- CVE ID| CVE-2026-71518 製品| typemill/typemill — Typemill（フラットファイル PHP CMS、Slim 4） 影響を受けるバージョン|...

tiktok-scraper

TikTok 스크래퍼 & 다운로더 TikTok에서 유용한 정보를 스크래핑하고 다운로드합니다. 로그인이나 비밀번호가 필요하지 않습니다. 공식 API 지원 등이 아닙니다. TikTok 웹 API를 사용하여 미디어를 스크래핑하는 스크래퍼일 뿐입니다. 기능 사용자 이름, 해시태그 또는 트렌드에서 동영상 게시물 스크래핑 미디어를 다운로드하여 ZIP 아카이브로 저장 게시물 정보가 포함된 JSON/CSV 파일 생성 참고: 모든 동영상 게시물을 다운로드하려면 number를 0으로 설정하세요. 게시물 - JSON/CSV 출력: id:...

VK-Scraper

VK Scraper vk-scraper는 VK 사용자/커뮤니티의 데이터를 스크래핑하고 다운로드하는 Python으로 작성된 명령줄 애플리케이션입니다. 책임감 있게 사용하세요. 작동 방식에 대한 더 나은 이해를 원한다면 문서를 참조하세요. 기능 사진 스크래핑 동영상 스크래핑 업로드 및 외부 모두 저장된 사진 스크래핑 스토리 스크래핑 설치 Arch GNU/Linux 안정 버전 vk-scraper: git clone https://aur.archlinux.org/vk-scraper.git vk-scraper git 버전...

Snap-Scraper

Snap Scraper 설명 Snap Scraper는 사용자가 위도와 경도 좌표 세트를 사용하여 Snapchat의 Snap Map에 업로드된 미디어를 다운로드할 수 있게 해주는 오픈 소스 인텔리전스 도구입니다. 이 프로젝트는 Snap inc. 또는 그 계열사나 자회사와 전혀 제휴, 승인, 유지, 후원 또는 보증되지 않습니다. 이 프로그램은 교육, 법의학 및 버그 보고 목적으로만 제공되며 보증 없이 제공됩니다. 이 도구를 사용할 때는 다음 출판물을 인용해 주십시오: 1. Richard Matthews, Kieren Lovell,...

instaloader

.. image:: https://raw.githubusercontent.com/instaloader/instaloader/master/docs/logoheading.png .. badges-start |pypi| |pyversion| |license| |aur| |contributors| |downloads| .. |pypi| image:: https://img.shields.io/pypi/v/instaloader.svg :alt: Instaloader PyPI Project Page :target:...

Sulu: Stored XSS via media download inline-disposition override

Impact Stored Cross Site Scripting XSS in the media download endpoint. The download route /media/id/download/slug and its admin variant accepts the query parameter ?inline=1. When it is present, the response is sent with the header Content-Disposition: inline for any MIME type, which overrides th...

GHSA-PP4X-CCXQ-6R33 Sulu: Stored XSS via media download inline-disposition override

Impact Stored Cross Site Scripting XSS in the media download endpoint. The download route /media/id/download/slug and its admin variant accepts the query parameter ?inline=1. When it is present, the response is sent with the header Content-Disposition: inline for any MIME type, which overrides th...

CVE-2026-82396

Sulu , an open-source PHP CMS built on Symfony, is affected by a stored XSS in MediaStreamController.php prior to versions 2.6.25 and 3.0.8 . The /media/{id}/download/{slug} route honors the inline=1 query parameter for scriptable MIME types (text/html, application/xhtml+xml, text/xml, applicatio...

CVE-2026-82396 Sulu: Stored XSS via media download inline-disposition override

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php allows the /media/id/download/slug route and its administration variant to honor the inline query parameter for...

CVE-2026-82396 Sulu: Stored XSS via media download inline-disposition override

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php allows the /media/id/download/slug route and its administration variant to honor the inline query parameter for...

CVE-2026-71518

Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants. Attackers can substitute normalized path forms such as dot-slash prefixes, double...

EUVD-2026-60470

Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants. Attackers can substitute normalized path forms such as dot-slash prefixes, double...

PT-2026-76826

Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants. Attackers can substitute normalized path forms such as dot-slash prefixes, double...

WordPress Product Attachment for WooCommerce plugin < 2.3.3 - Unauthenticated Arbitrary Media Download vulnerability

Unauthenticated Arbitrary Media Download vulnerability discovered by kevin@OPCIA in WordPress Plugin WooCommerce Product Attachment versions 2.3.3...

CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin versions before 2.3.3 is vulnerable to an unauthenticated arbitrary media download . The root cause is a missing authorization check when streaming media library files, which allows attackers to download any attachment—including private or u...

CVE-2026-16285 WooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media Download

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-63096 Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

CVE-2026-63096 Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

EUVD-2026-45194

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

CVE-2026-63096

CVE-2026-63096 affects Dendrite up to version 0.13.8, which contains a server-side request forgery (SSRF) flaw in the legacy media download endpoint. An unauthenticated attacker can supply an unvalidated serverName parameter to trigger outbound TLS connections to arbitrary hosts/ports. Error mess...