137427 matches found
EUVD-2026-86575
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'pageurl' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to...
CVE-2026-12037
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'pageurl' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to...
CVE-2026-12037 Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.0.5 via the 'pageurl' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to...
CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille-
Aviso de seguridad: Contrabando de peticiones HTTP mediante desincronizaciΓ³n de Transfer-Encoding rouille ID de CVE asignado: CVE-2026-67181 Resumen rouille::proxy::proxy reenvΓa la cabecera Transfer-Encoding del cliente al backend sin cambios, pero escribe el cuerpo de la peticiΓ³n que tinyhttp y...
CVE-2026-62062
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-78397
The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...
POC-CVE-2026-56164-exploit
CVE-2026-56164 β Exploit de omisiΓ³n de autenticaciΓ³n en Microsoft SharePoint Server CrΓtico CVSS 9.8 β Escalada de privilegios no autenticada a Administrador de granja en Microsoft SharePoint Server Tabla de contenidos DescripciΓ³n general Detalles de la vulnerabilidad Versiones afectadas Diagrama...
EUVD-2026-86532
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-62062
The Elementor Website Builder plugin for WordPress (versions n/a through 4.3.1 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of a victim user. While the high CVSS score of 8.8 indicates significant impa...
CVE-2026-62062 WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
HttpStrike
HttpStrike Un script DDoS rΓ‘pido escrito en Python; enviarΓ‘ una gran cantidad de solicitudes GET si aumentas las solicitudes como prefieras...
CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB
CVE-2026-23002 β Desbordamiento de bΓΊfer en mensaje NAS 5G en gNodeB CΓ³digo del programa simulaciΓ³n en C root@kitploit: // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length...
CVE-2026-95811
A flaw was found in lemonldap-ng. The request handler evaluates security rules against raw, unnormalized web addresses while the underlying web server processes decoded and normalized paths. An authenticated attacker can exploit this discrepancy by submitting specially crafted requests containing...
CVE-2023-37596
CVE-2023-37596 β issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF β Delete Any User Severity: High | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Table of Contents Overview Vulnerability Details Impact Affected Version Attack Scenario Proof of Concept Steps to Reproduce...
CVE-2024-54330
CVE-2024-54330 Hurrakify bfdibc85r04ky96cie05dfzjjgigz...
CVE-2019-2725-POC
CVE-2019-2725-POC CVE-2019-2725-POC Modify the webshell address in the txt file to your own webshell address, then use Burp Suite to send a POST request to the target server, with the request packet content being the content from the txt file...
request_smuggler
Request smuggler Http request smuggling vulnerability scanner Based on the amazing research by James Kettle. The tool can help to find servers that may be vulnerable to request smuggling vulnerability. Archived The tool needs a lot of improvements, and I don't have enough time to support it as I...
shadowd
Logotipo Shadow Daemon es un cortafuegos de aplicaciones web que intercepta las peticiones a nivel de aplicaciΓ³n. Este repositorio contiene el componente principal de Shadow Daemon que maneja el anΓ‘lisis y almacenamiento de peticiones. DocumentaciΓ³n Para la documentaciΓ³n completa, consulte...
explo
explo explo is a simple tool to describe web security issues in a human and machine readable format. By defining a request/condition workflow, explo is able to exploit security issues without the need of writing a script. This allows to share complex vulnerabilities in a simple readable and...
ExtendedMacro
ExtendedMacro ExtendedMacro is plug-in for BurpSuite proxy. It provides similar but extended functionality of BurpSuite Macro feature. The main functionality is, that you are able to trigger one or more request before every request triggered from Intruder, Repeater, Scanner, Sequencer or Spider...