PoC_CVE-2024-28157

CVE-2024-28157 - XSS stocké dans le plugin Jenkins GitBucket GitBucket URL : javascript:alert77 3. Enregistrer, puis visiter la page du projet 4. L'alerte se déclenche avec 49 77 Les captures d'écran sont dans poc/screenshots/ Références NVD https://nvd.nist.gov/vuln/detail/CVE-2024-28157...

Netbox-CVE-2023-37625

Netbox-CVE-2023-37625 الوصف ثغرة تخزين للبرمجة النصية عبر المواقع XSS في Netbox alert1' 3. أضف نموذجًا جديدًا، في هذا المثال أضف نموذج 'الشركة المصنعة' manufacturer. 4. افتح النموذج المنشأ حديثًا كأي مستخدم مصادق، ولاحظ أن مربع التنبيه قد نُفذ...

CVE-2025-55816

CVE-2025-55816 CVE-2025-55816 HotelDruid 3.0.7 المؤلف: partywave التعاون: فريق Raptx المراجع الخارجية سجل تغييرات HotelDruid 3.0.8 منشور المدونة الخاص بـ CVE موقع Raptx الثغرة الأمنية الثغرة هي Stored Cross Site Scripting XSS بسيطة في نقطة النهاية /modificaapp.php. يمكن للمهاجم إدخال حمولة جافا...

CVE-2025-1304

🚨 قالب NewsBlogger لووردبريس = 0.2.5.1 - رفع ملف تعسفي CVE-2025-1304 درجة CVSS: 8.8 عالية نوع الثغرة: رفع ملف تعسفي المكون: قالب ووردبريس معرف CVE: CVE-2025-1304 🔥 نظرة عامة على الثغرة قالب NewsBlogger لووردبريس الإصدارات = 0.2.5.1 معرض لـ رفع ملف تعسفي عبر لوحة الترحيب الخاصة بالمشرف. تسمح هذه...

CVE-2026-71944

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious commands into the fotaurl field, resulting in command...

SUSE-SU-2026:3503-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2026-15307: server-side file-write and request forgery via spatial lookups bsc1272997. - CVE-2026-15337: potential denial-of-service vulnerability in checkforlanguage bsc1272998. - CVE-2026-15830: potential denial-of-service...

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2026-15307: server-side file-write and request forgery via spatial lookups bsc1272997. CVE-2026-15337: potential denial-of-service vulnerability in checkforlanguage bsc1272998. CVE-2026-15830: potential denial-of-service vulnerability...

CVE-2026-15920 Potential cross-site scripting via URLField values in the admin

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

CVE-2026-15920

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

EUVD-2026-52750

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

CVE-2026-15920 Potential cross-site scripting via URLField values in the admin

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

CVE-2026-15920 Potential cross-site scripting via URLField values in the admin

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

PYSEC-2026-2766 Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field

summary POST /api/chat/completions accepts an imageurl.url value that, when it does NOT start with http://, https://, or data:image/, is interpreted as a file id and resolved against the global file table with no ownership check. An authenticated user can therefore set imageurl.url to another...

PYSEC-2026-2448 Django vulnerable to Uncontrolled Resource Consumption

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. URLField.topython in Django calls urllib.parse.urlsplit, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode characters, allowing a remote attacker to cause denial o...

PT-2026-59117

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. URLField.to python in Django calls urllib.parse.urlsplit, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode characters, allowing a remote attacker to cause denial ...

CVE-2026-59707

CVE-2026-59707 : LocalAI exposes an unauthenticated SSRF via POST /models/apply. The endpoint forwards unsanitized gallery URL fields to gallery.GetGalleryConfigFromURLWithContext, allowing requests to internal/private/loopback URLs and leaking partial responses in error messages. No exploitation...

CVE-2026-12560

The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-12560

The Editorial Rating – Product Review & Rating System plugin for WordPress (versions up to 4.0.5) is vulnerable to Stored Cross-Site Scripting via the Link URL field due to insufficient input sanitization and output escaping. Authenticated attackers with administrator-level access can store a pay...

PT-2026-53811

Name of the Vulnerable Software and Affected Versions Editorial Rating – Product Review & Rating System versions prior to 4.0.6 Description Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level access and above to perform Stored Cross-Site...

CVE-2026-12560: Improper Neutralization of Input During Web Page Generation

The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...