CVE-2026-55993

camel-atmosphere-websocket Header Injection Reproducer CVE-2026-55993 This project demonstrates a message-header injection in Apache Camel's camel-atmosphere-websocket component, tracked as CVE-2026-55993. The WebSocket consumer copies the connection's query parameters onto the Camel Exchange...

OpenSource-ERP-SQL-Injection

OpenSource-ERP-SQL-Injection La aplicación OpenSource ERP tiene una vulnerabilidad de inyección SQL. CVE-2019-5893 https://vulners.com/cve/CVE-2019-5893 https://www.exploit-db.com/exploits/46118 PoC - Obtener nombre de la BD root@kitploit: POST /db/utils/query/data.xml HTTP/1.1 User-Agent:...

CVE-2025-30208

CVE-2025-30208 检测工具 Análisis de vulnerabilidad Análisis y reproducción de la vulnerabilidad de lectura arbitraria de archivos en Vite CVE-2025-30208 Introducción Esta herramienta se utiliza para detectar si el sistema objetivo presenta la vulnerabilidad CVE-2025-30208. Esta vulnerabilidad permite...

CVE-2018-6643

CVE-2018-6643 CVE-2018-6643 Infoblox NetMRI 7.1.1 hxxp::/xxx.abc/api/docs/index.php?query=555"...

CVE-2019-10475

CVE-2019-10475 POC rápido para Jenkins CVE-2019-10475 / SECURITY-1490 reportado el 2019-10-23. El problema se encuentra dentro del plugin build-metrics, que genera algunas métricas básicas de compilación. Se usa comúnmente con el plugin de enlaces de barra lateral de Jenkins. Esta es una...

CVE-2022-23305_POC

CVE-2022-23305 Log4j JDBCAppender POC de inyección SQL Esta es una aplicación muy sencilla basada en Spring Boot que demuestra la vulnerabilidad CVE-2022-23305. Utiliza Apache Maven, Spring Boot, Spring MVC y la base de datos en memoria H2 para registrar una entrada simple, tomada como un parámet...

-CVE-2021-26904

CVE-2021-26904 LMA ISIDA Retriever 5.2 permite la inyección SQL Descripción sugerida : "ISIDA RETRIEVER v5.2" Inyección SQL Funcionalidad vulnerable : La plataforma ISIDA RETRIEVER es vulnerable a la inyección SQL URL y parámetro vulnerables : website.com/index.php?title=Injection URL y parámetro...

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

CVE-2026-11101 – HTTP Cache Poisoning via Unkeyed Query Parameter Overview A web cache uses only the URL path as the cache key, ignoring query parameters. An attacker can append a malicious payload to an unkeyed parameter e.g., utmcampaign and poison the cache. Subsequent visitors receive the...

CVE-2026-78172

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-78172

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the query parameter name in all versions up to and including 1.5.5 , caused by insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary we...

CVE-2026-78172 Themify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site Scripting

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

EUVD-2026-75941

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

EUVD-2026-75583

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further...

CVE-2024-50340

CVE-2024-50340 POC Requirements The registerargcargv option must be enabled in the PHP configuration file php.ini. This setting loads command-line arguments and query params into $SERVER'argv'. https://www.php.net/manual/en/ini.core.phpini.register-argc-argv Explanation of Vulnerable Code This...

CVE-2026-65694-PoC

CVE-2026-65694 — Microweber CMS Unauthenticated Arbitrary File Read Proof-of-concept for CVE-2026-65694 , an unauthenticated path-traversal → arbitrary file read in Microweber CMS. An unauthenticated attacker can read any file the web-server user can access — the Laravel .env APPKEY, DB...

CVE-2025-30208-Vite

CVE-2025-30208 | Script de Vite Esta herramienta se utiliza para detectar si el sistema objetivo presenta la vulnerabilidad CVE-2025-30208. Esta vulnerabilidad permite a un atacante leer archivos sensibles del servidor como /etc/passwd o C:\windows\win.ini a través de rutas específicas. La...

CVE-2025-49132

CVE-2025-49132 Prueba de Concepto PoC Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-49132, una vulnerabilidad crítica de ejecución remota de código RCE sin autenticación en versiones de Pterodactyl Panel anteriores a la 1.11.11. Detalles de la Vulnerabilidad ID de CVE :...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.2

Red Hat OpenShift Service Mesh 3.4.2 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.4....

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.7

Red Hat OpenShift Service Mesh 3.3.7 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.3....

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.9

Red Hat OpenShift Service Mesh 3.2.9 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.2....