CVE-2026-118657

The Echo Go web framework (versions prior to 4.16.0 and 5.4.0 ) is vulnerable to an HTTPS redirect and HSTS bypass because Context.Scheme unconditionally trusts forwarded scheme headers from any client. An attacker can bypass HTTPSRedirect by claiming an HTTPS scheme over plaintext HTTP, or suppr...

CVE-2026-118657 Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers from any client. A client that reaches Echo directly over plaintext HTTP can claim an HTTPS scheme and bypass HTTPSRedirect because the request is treated as already secure...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation pip install acltoolkit-ad or...

TeamsNTLMLeak

Description When a user navigates to a "Website" tab that directs to a specially designed webpage, it can result in the exposure of the NTLM hash through the activation of an Office URL scheme, thereby reducing the process to a single-click path for the leak. If one attempts to open a link in the...

HElib

HElib HElib is an open-source Apache License v2.0 software library that implements homomorphic encryption HE. Currently available schemes are the implementations of the Brakerski-Gentry-Vaikuntanathan BGV scheme with bootstrapping and the Approximate Number scheme of Cheon-Kim-Kim-Song CKKS, alon...

CVE-2024-27954

CVE-2024-27954 - WordPress wp-automatic Plugin LFI Scanner This project provides a Python-based Local File Inclusion LFI vulnerability scanner targeting CVE-2024-27954 , a critical flaw found in the WordPress plugin wp-automatic. The vulnerability allows unauthenticated attackers to read arbitrar...

CVE-2026-20841

CVE-2026-20841 This content corresponds to a part of what is provided through the Monthly Report for PatchPoint subscribers. Overview Microsoft disclosed a patch for an RCE vulnerability in Notepad in February 2026. The vulnerability is a Command Injection vulnerability that occurs in Notepad,...

RainLab-User-Open-Redirect

RainLab User Plugin - Open Redirect Vulnerability Vulnerab...

PT-2026-123397

Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse scheme output in lib/sbi/conv.c during SUCI de-concealment due to incomplete length validation. Remote unauthenticated UEs or SBI peers can submit a crafted SUCI with a 42-byte scheme output to a UDM, triggering a...

fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

Impact fast-uri percent-decodes the scheme component with the legacy global unescape before validating it, so an input whose decoded scheme is a valid but dangerous token is emitted as a live scheme. RFC 3986 section 3.1 does not allow percent-encoding in a scheme, so no RFC or WHATWG parser trea...

GHSA-W74X-V6F9-J3XG fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

Impact fast-uri percent-decodes the scheme component with the legacy global unescape before validating it, so an input whose decoded scheme is a valid but dangerous token is emitted as a live scheme. RFC 3986 section 3.1 does not allow percent-encoding in a scheme, so no RFC or WHATWG parser trea...

npm: fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

npm: fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding vulnerability discovered by ? in WordPress npm fast-uri versions 2.4.8...

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

Impact fast-uri's serialize, normalize, and resolve, when called with the non-default option reference: 'suffix' on a reference that has no authority, emit a relative reference whose first path segment contains a bare colon without escaping it. RFC 3986 section 3.3 requires the first segment of a...

GHSA-333X-W4R6-6CRP fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

Impact fast-uri's serialize, normalize, and resolve, when called with the non-default option reference: 'suffix' on a reference that has no authority, emit a relative reference whose first path segment contains a bare colon without escaping it. RFC 3986 section 3.3 requires the first segment of a...

npm: fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

npm: fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references vulnerability discovered by ? in WordPress npm fast-uri versions 2.4.8...

CVE-2019-25779

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

EUVD-2019-20210

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

CVE-2019-25779 WooThemes Diarise 1.5.9 Local File Disclosure via download.php

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

CVE-2019-25779

The WooThemes Diarise WordPress theme, in versions through 1.5.9 , is vulnerable to a file read vulnerability (Local File Disclosure). Unauthenticated attackers can exploit this by sending GET requests using the file:// scheme paths to the calendar parameter of the download.php file. This flaw al...

CVE-2026-114635 Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can send HTTP/2 requests with the :scheme http pseudo-header over TLS on Go 1.27 builds to reach routers requiring client...