PT-2026-106011

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

PT-2026-105987

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possible in the proxy request forwarding component. Requests containing multiple Content-Length headers with conflicting values are forwarded verbatim to the origin server, while...

The vulnerability of the GCC Conference Create Request server XRDP allows a hacker to disclose sensitive information.

The vulnerability of the GCC Conference Create Request server XRDP lies in the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns, related to the manipulation of cross-site requests, allows a hacker to access arbitrary files.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...

PT-2026-106017

🚨 CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the...

Linux Distros Unpatched Vulnerability : CVE-2026-63267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded,...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns lies in its susceptibility to cross-site request forgery attacks. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-105993

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...

PT-2026-106265

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.30.0 Description In deployments using flash late-interaction scoring, the engine derives worker cache keys for query embeddings from the X-Request-Id header, which is controlled by the caller. A concurrent request that...

PT-2026-105988

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronization is possible in the proxy request forwarding component. A request that contains both a Content-Length and a Transfer-Encoding header is forwarded with both headers present,...

PT-2026-104766

Name of the Vulnerable Software and Affected Versions PowerPress Podcasting versions prior to 11.17.10 Description Cross-Site Request Forgery CSRF allows an attacker to induce a user to perform actions they did not intend to do on the PowerPress Podcasting plugin. Recommendations Update PowerPres...

CVE-2026-102776: Cross-Site Request Forgery (CSRF)

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

...[ More ]

There is a critical authentication bypass vulnerability residing within Kestra OSS's core request-filtering mechanism. Due to insecure suffix-matching logic instead of strict routing or exact segment validation, attackers can craft custom request paths that bypass security controls. This allows...

CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer

CVE-2023-27163 - Request-Baskets SSRF 개념 증명 이것은 CVE-2023-27163 에 대한 개념 증명PoC 익스플로잇이자 localhost 포트 브루트포서입니다. CVE-2023-27163 은 Request-Baskets의 서버 측 요청 위조SSRF 취약점입니다. 이 PoC는 forwardurl 매개변수를 악용하여 로컬 인터페이스에 바인딩된 활성 서비스를 브루트포스 스캔합니다. 서비스가 발견되면 공격자는 취약한 전달 메커니즘을 통해 해당 서비스에 액세스할 수 있습니다. 설명 CVE:...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 참고 보고서: GHSA-pgpj-v85q-h5fm 이 저장소는 pyLoad 서버와 csrf.html만을 제공하는 공격자 서버를 모두 설정하는 docker compose 구성을 포함합니다. 직접 테스트하려면 docker composer up을 실행하세요 docker 외에 docker composer도 설치되어 있어야 합니다. 그런 다음 localhost:8000으로 이동합니다. 이곳은 pyLoad 로그인 페이지이며, 사용자 pyload와 비밀번호 pyload로 로그인합니다. 그런 다음...

CVE-2024-29973

CVE-2024-29973 - リモートコマンドインジェクションの脆弱性 説明 CVE-2024-29973 は、特定の Zyxel ネットワークデバイスに見られる重大な脆弱性です。この脆弱性により、認証されていない攻撃者がファームウェアの不適切な入力検証メカニズムを悪用して、対象デバイス上で任意のコマンドを実行できる可能性があります。攻撃者は特別に細工した HTTP リクエストをデバイスに送信し、システムレベルのコマンドを注入して、デバイスの完全な制御を獲得する可能性があります。 Dorks Hunter: product.name="ZyXEL...

CVE-2025-55183_POC

CVE-2025-55183 - Next.js RSC 서버 함수 소스 코드 노출 Next.js React Server ComponentsRSC의 소스 코드 노출 취약점입니다. 취약한 서버 함수로 전송된 악의적인 HTTP 요청은 인수가 문자열화될 때 모든 서버 함수의 소스 코드를 안전하지 않게 반환할 수 있습니다. 참고 작성자 : X/Twitter의 AndrewMohawk 실습 환경 설정 git clone https://github.com/AndrewMohawk/RSC-sample-app.git cd RSC-sample-app n...

CVE-2020-23588

CVE-2020-23588 OPTILINK E-PON "모델 번호: OP-XT71000N"과 "하드웨어 버전: V2.2"; & "펌웨어 버전: OPV3.3.1-191028" "OPTILINK OP-XT71000N 하드웨어 버전: V2.2, 펌웨어 버전: OPV3.3.1-191028"에서 발견된 취약점으로, 인증되지 않은 원격 공격자가 "/rmtacc.asp"를 통해 "포트 활성화 또는 비활성화" 및 "포트 번호 변경"을 위한 사이트 간 요청 위조CSRF 공격을 수행할 수 있습니다. 대상 /rmtacc.asp 공격 벡터 CSRF...

CVE-2024-29895.py

Cacti RCE - CVE-2024-29895 사용법: python3 cve-2024-29895.py -u https://target.com/ -c id Cacti 1.3.X DEV 빌드에 영향을 미치며, cmdrealtime.php가 존재하고 POLLERID가 활성화된 경우입니다. 이 엔드포인트에서 GET 요청 시 페이로드를 HTML 쿼리 매개변수로 전달하여 명령 주입이 가능합니다. Dork: Google: inurl:cmdrealtime.php Shodan: Cacti Hunter.how:...

CVE-2024-42008-9-exploit

CVE-2024-42008-9-exploit 이 저장소의 스크립트는 CVE-2024-42008 및 CVE-2024-42009를 악용하기 위해 만들어졌습니다. 이 두 CVE는 Roundcube 1.6.7에서 발견된 취약점입니다. 이러한 CVE와 이를 악용하는 방법에 대한 자세한 내용은 다음 링크를 참조하십시오: https://www.sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail...