CVE-2025-71462

Zipline versions before 3.7.12 are vulnerable to a cross-site scripting (XSS) vulnerability on the login page. The root cause is an unvalidated url parameter that allows an attacker to execute arbitrary JavaScript by crafting a login link containing a javascript: URI . When a victim clicks this l...

CVE-2024-38200

CVE-2024-38200 After The Patch Capturing the NTLMv2 hash over HTTP method was not fixed. The NTLMv2 hash value can still be obtained over HTTP and relayed to LDAP or ADCS. MSRC stated this situation as "as presented this looks to be part of the current design." Even if this vulnerability is fixed...

Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution

Spring Cloud Netflix Hystrix Dashboard prior to version 2.2.10 is susceptible to remote code execution. Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view...

LG Supersign EZ CMS - Remote Code Execution

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail. id: CVE-2018-17173 info: name: LG Supersign EZ CMS - Remote Code Execution author: pussycat0x severity: critical description: | LG SuperSign CMS allows remote attackers...

SiYuan 2.9.0-3.8.6 - Unauthenticated XSS via check-auth "to" Parameter

SiYuan 2.9.0 through 3.8.6 serves the unauthenticated /check-auth authorization page app/stage/auth.html with a script that assigns the to query parameter to window.location.href without scheme validation. A crafted link whose to value is a javascript: URI executes script in the kernel origin onc...

vCenter Server - Improper Access Control

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed. id: CVE-2021-22017 info: name:...

Solara <1.35.1 - Local File Inclusion

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

svg-cheatsheet

SVG SSRF Cheatsheet Hosts that process SVG can potentially be vulnerable to SSRF, LFI, XSS, RCE because of the rich feature set of SVG. All of these methods specify a URI, which can be absolute or relative. File and HTTP protocol are important to test, but it could also support other protocols...

CVE-2015-7214

CVE-2015-7214 What is CVE-2015-7214? Please see the following link. Cross-site reading attack through data and view-source URIs Contents www/index.html SOP bypass PoC for Web local/index.html SOP bypass PoC for local Requirements Firefox version 42.0 or earlier The following is the download link ...

Addressable: Regular Expression Denial of Service in templates with certain exploded expressions

Impact Within the URI template implementation in Addressable, templates using the explode modifier with the /, ., ;, ? or & operators e.g., /segments, .ext, ;params, ?query generate regular expressions vulnerable to catastrophic backtracking. When Templatematch or Templateextract is called with a...

CVE-2026-126350

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 until 2.9.1, URI template expressions using the explode modifier with the slash, dot, semicolon, question-mark, or ampersand operators generate ambiguous regular expressions...

CVE-2026-126353

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 until 2.9.1, URI template expressions containing several exploded variables generate ambiguous regular expressions that can divide a run of members among the variables in...

EUVD-2026-124734

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.2.5 until 2.9.1, Addressable::URI.normalizepath can resolve a path containing leading parent segments and later parent segments to a different path than an RFC 3986 resolver...

CVE-2026-126353

The Addressable library (an alternative to Ruby's standard URI implementation) is vulnerable to a Regular Expression Denial of Service (ReDoS) . In versions 2.3.0 through 2.9.1 , URI template expressions containing multiple exploded variables generate ambiguous regular expressions. Processing an ...

CVE-2026-126353 Addressable: Regular Expression Denial of Service in Addressable templates with several exploded variables

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 until 2.9.1, URI template expressions containing several exploded variables generate ambiguous regular expressions that can divide a run of members among the variables in...

EUVD-2026-124731

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. Prior to 2.9.1, Addressable::URI.normalizepath repeatedly scans and rewrites paths while removing only one nested dot segment per pass, producing quadratic work. URInormalize,...

CVE-2026-126351

The Addressable library, a Ruby URI implementation, contains a Denial of Service vulnerability in versions prior to 2.9.1 . The root cause is an inefficient path normalization process in Addressable::URI.normalize_path, which repeatedly scans and rewrites paths by removing only one nested dot seg...

CVE-2026-126351 Addressable: Denial of service in URI path normalization

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. Prior to 2.9.1, Addressable::URI.normalizepath repeatedly scans and rewrites paths while removing only one nested dot segment per pass, producing quadratic work. URInormalize,...

CVE-2026-126206

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. In 2.25.2, Loofah::HTML5::Scrub.alloweduri? treats a data URI mediatype containing the HTML5 named solidus reference as malformed and falls back to the allowed text/plain, whi...

CVE-2024-28752

Apache CXF CVE-2024-28752 Reproduction Environment Vulnerability Advisory: https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt Environment Startup samples/javafirstjaxwsfactorybean IDEA Start the webservice service via ServerStarter.java Build Use JDK8 mvn clean package java -jar...