542 matches found
XWiki - Cross-Site Scripting
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the restore template to perform a XSS, e.g. by using URL such as:...
XWiki >= 6.2-milestone-1 - Cross-Site Scripting
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...
CVE-2021-36750
CVE-2021-36749 Informazioni - Nel sistema di ingestion di Druid, InputSource viene utilizzato per leggere dati da una determinata fonte dati. Tuttavia, HTTP InputSource consente agli utenti autenticati di leggere dati da altre fonti rispetto a quelle previste, come il file system locale, con i...
CVE-2022-28117
CVE-2022-28117 Navigate CMS = 2.9.4 - Server-Side Request Forgery Authentifiziert Beschreibung Eine Server-Side Request Forgery SSRF in der feedparser-Klasse von Navigate CMS v2.9.4 ermöglicht es entfernten Angreifern, die Anwendung zu zwingen, beliebige Anfragen durch die Injektion beliebiger UR...
CVE-2025-59382-QNAP-Password-Reset-Account-Takeover
CVE-2025-59382: Reimpostazione Password QNAP per Acquisizione Account URL di reimpostazione password controllato da un attaccante non autenticato in /cgi-bin/resetpassword.cgi. Testato su QuTScloud c5.2.4.3041 build 20250211 in un laboratorio. QNAP ha successivamente pubblicato questo come...
cve-2025-24514
🔥 PoC di verifica della vulnerabilità remota CVE-2025-24514 Questo script è un PoC basato su Python per la verifica remota della vulnerabilità CVE-2025-24514 manipolazione della configurazione NGINX e possibile esecuzione di codice remoto tramite l'iniezione di auth-url in ingress-nginx. 🧠...
Linux Distros Unpatched Vulnerability : CVE-2026-105800
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled languag...
CVE-2026-105800
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
DEBIAN-CVE-2026-105800
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800 i18next-http-backend incomplete URL validation permits SSRF
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
EUVD-2026-93433
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace values interpolated into a custom loadPath or addPath that begins directly with lng or ns can make colon-based input becom...
CVE-2026-105800
The i18next-http-backend library, used for loading translation resources in Node.js , browsers , and Deno , is vulnerable to Server-Side Request Forgery (SSRF) and URL injection prior to version 4.0.2 . The root cause is incomplete URL validation where attacker-controlled language or namespace va...
PT-2026-106757
Name of the Vulnerable Software and Affected Versions i18next-http-backend versions prior to 4.0.2 Description An issue exists where attacker-controlled language or namespace values interpolated into a custom loadPath or addPath can lead to URL injection or server-side request forgery SSRF. This...
CVE-2024-4041
CVE-2024-4041 Yoast SEO /?page=%22%20onmouseover%3D%22alertdocument.domain%22%20x%3D%22 3. Nella barra di amministrazione, apri il menu Yoast e passa il mouse/fai clic su Get Yoast SEO Premium. 4. JavaScript viene eseguito dal gestore di eventi iniettato onmouseover, confermando l'XSS riflesso...
IngressNightterror
IngressNightterror CVE-2025-1974 Panoramica Questo repository contiene la mia ricerca sulla vulnerabilità IngressNightmare. Include file di deploy Ingress vulnerabili, l'exploit stesso e un payload di oggetto condiviso. CVE Elenco degli indici CVE: CVE-2025-1974 - Vulnerabilità principale...
AlmaLinux 9.2 [TuxCare] Security Update: grafana (ALMALINUX9.2:CLSA-2026:1779532464)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779532464 advisory. - Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapsh...
CLEANSTART-2026-PR31494 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute
Security vulnerability affects the loki package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...