NextChat - Server-Side Request Forgery

NextChat v2.12.3 suffers from a Server-Side Request Forgery SSRF and Cross-Site Scripting vulnerability due to a lack of validation of the GET parameter on the WebDav API endpoint. id: CVE-2024-38514 info: name: NextChat - Server-Side Request Forgery author: DhiyaneshDk severity: high description...

Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter. id: CVE-2023-30019 info: name: Imgproxy = 3.14.0 - Server-side request forgery SSRF author: DhiyaneshDK severity: medium description: | imgproxy =3.14.0 is vulnerable to...

rConfig 3.9.4 - Server-Side Request Forgery

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery SSRF via the patha parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs. id: CVE-2023-39109 info: name: rConf...

UniFi OS Server - Command Injection

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...

Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. id: CVE-2020-29453 info: name: Jira Server Pre-Auth - Arbitrary File...

Spring Cloud Config Server - Local File Inclusion

Spring Cloud Config Server versions 2.1.x prior to 2.1.2, 2.0.x prior to 2.0.4, 1.4.x prior to 1.4.6, and older unsupported versions are vulnerable to local file inclusion because they allow applications to serve arbitrary configuration files. An attacker can send a request using a specially...

poet

poet Una herramienta simple de post-explotación. Resumen El programa cliente se ejecuta en la máquina objetivo y está configurado con una dirección IP el servidor a la que conectarse y una frecuencia de conexión. Si el servidor no se está ejecutando cuando el cliente intenta conectarse, el client...

cve-2018-1335

Ankara Yildirim Beyazit University Computer Engineering Department CENG 325 - Principles of Information Security And Privacy CENG201 OOP Project Group Members @canumay @aslihann @ezgigucuyener @mburakdonmez References NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.18 - Command Injection...

CVE-2025-55182-React2Shell

React2Shell React2Shell is a proof-of-concept PoC exploit demonstrating a CRITICAL remote code execution RCE vulnerability in modern web frameworks using React Server Components RSC. This PoC targets CVE-2025-55182 , a CVSS 10.0 vulnerability that allows unauthenticated remote attackers to execut...

CVE-2021-41773

CVE-2021-41773 apache http server vulnerability only works 2.4.49 requirement settings httpd.conf ... LoadModule cgimodule modules/modcgi.so uncomment this line ... AllowOverride none Require all denied comment out this line or set Require all granted ... References...

pyfiscan

pyfiscan परिचय Pyfiscan एक मुफ्त वेब-एप्लिकेशन भेद्यता और संस्करण स्कैनर है और इसका उपयोग Linux-सर्वरों में सामान्य वेब-एप्लिकेशन के पुराने संस्करणों का पता लगाने के लिए किया जा सकता है। उदाहरण उपयोग मामला होस्टिंग-प्रदाताओं का है जो सुरक्षा-अपडेट के साथ बने रहने के लिए अपने उपयोगकर्ताओं की...

CVE-2025-55182

CVE-2025-55182 — React2Shell: Advanced Exploit & Master's Thesis Research -brightred Deserialization of Untrusted Data + Prototype Pollution in React Server Components Unauthenticated Remote Code Execution via Next.js Server Actions Affected: React 19.0.0 - 19.2.0 · Patch: React 19.0.1 / 19.1.2 /...

[SECURITY] Fedora 44 Update: xorg-x11-server-Xwayland-24.1.14-1.fc44

Xwayland is an X server for running X clients under Wayland...

Next.js_exploit_CVE-2024-34351

csr-rsc-ssg-isr-ssr-ssrf यह रिपॉजिटरी किसी एक या अधिक meetups को प्रस्तुत करने के लिए सहायक सामग्री के रूप में काम कर सकती है। क्रम इस प्रकार है... "CSR" Client Side Rendering: React को एक मानक SPA लाइब्रेरी के रूप में उपयोग करना "RSC" React Server Components: React कम्पोनेंट्स को केवल सर्वर साइड...

CVE-2024-22274-RCE

تصعيد الامتيازات: RCE مصادق عليه في VMware vCenter Server 📜 الوصف مكونات واجهة برمجة التطبيقات "com.vmware.appliance.recovery.backup.job.create" و "com.vmware.appliance.recovery.backup.validate" معرضة لهجوم حقن علم يمكن استغلاله لتنفيذ أوامر عشوائية كمستخدم الجذر على النظام المستهدف. 📚 جدول...

headscale

تطبيق مفتوح المصدر ومستضاف ذاتيًا لخادم تحكم Tailscale. انضم إلى خادم Discord للدردشة. ملاحظة: اختر دائمًا نفس علامة GitHub مثل الإصدار الذي تستخدمه لضمان حصولك على مثال التكوين الصحيح. قد يحتوي الفرع main على تغييرات غير منشورة. الوثائق متاحة للإصدارات المستقرة والتطويرية: وثائق الإصدار المستقر...

CLEANSTART-2026-QB44959 In Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. In Apache HTTP Server versions 2...

CLEANSTART-2026-TH04863 Apache HTTP server 2

Security vulnerability affects the apache2 package. Apache HTTP server 2...

CLEANSTART-2026-VO42453 In Apache HTTP Server 2

Security vulnerability affects the apache2 package. In Apache HTTP Server 2...

CLEANSTART-2026-RW21782 Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data

Security vulnerability affects the apache2 package. Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data...