WebExploitation-Notes

BookSheetCTF - Web Security CheatSheet & Concept Guide Selama...

OPENSUSE-SU-2026:21543-1 Security update for python-Django

This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-15307: server-side file-write and request forgery via spatial lookups bsc1272997 - CVE-2026-15337: potential denial-of-service vulnerability in checkforlanguage bsc1272998 - CVE-2026-15830: potential...

CVE-2026-19040

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

Malicious code in @bananacool467/ui-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8497bfe55fd379ac7c87c73e99e8c532193a17516996d9ae6cfb856b84a052a The package advertises itself as a UI-components library README compares it to MUI, but its main export surface includes useTerminal, a server-side...

CVE-2026-12605

The CVE-2026-12605 affects Eclipse GlassFish 8.0.x before 8.0.4. A CSRF + SSRF flaw in DownloadServlet ContentSources allows leakage of the admin gfresttoken to an attacker-controlled host when the victim is authenticated in the Admin Console, enabling full unauthenticated takeover of the GlassFi...

EUVD-2026-53925

In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin gfresttoken to attacker-controlled host if the victim is authenticated into the Admin Console -\ full unauthenticated takeover of Eclipse GlassFish domain until the token expires...

EUVD-2026-53924

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to...

CVE-2026-19040 MissionSquad mcp-api dcrClients.ts server-side request forgery

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to...

CVE-2026-19040 MissionSquad mcp-api dcrClients.ts server-side request forgery

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to...

CVE-2026-19040 MissionSquad mcp-api dcrClients.ts server-side request forgery

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to...

CVE-2026-19040

MissionSquad mcp-api (versions

vulnerabilities in Adobe Campaign Classic

Adobe has identified several vulnerabilities in Adobe Campaign Classic. These vulnerabilities include Server-Side Request Forgery SSRF, which allows privilege escalation without any user interaction; incorrect handling of special elements in the template engine, resulting in the execution of...

EUVD-2026-53823

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...

CVE-2026-18597

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...

CVE-2026-18597 Blind SSRF on Foxit PDF Services API

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure...

CVE-2026-16268 Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler

The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetching a user-supplied URL on the server side, allowing unauthenticated attackers to make the site issue requests to arbitrary internal or external hosts...

EUVD-2026-53723

The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetching a user-supplied URL on the server side, allowing unauthenticated attackers to make the site issue requests to arbitrary internal or external hosts...

CVE-2026-16268

The Newsletters WordPress plugin (versions prior to 4.16 ) is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) via the SNS bounce handler. The root cause is a failure to authenticate or validate bounce-processing requests, which allows an attacker to force the server to fetch a...

CVE-2026-16268 Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler

The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetching a user-supplied URL on the server side, allowing unauthenticated attackers to make the site issue requests to arbitrary internal or external hosts...