CVE-2020-8193

CVE-2020-8193...

CVE-2025-31486-Simulation

Laboratorio de Path Traversal de Vite CVE-2025-31486 Un entorno de laboratorio contenedorizado y práctico para simular y explotar la vulnerabilidad de Path Traversal en el servidor de desarrollo de Vite, identificada como CVE-2025-31486. 📖 Acerca de la vulnerabilidad Este laboratorio demuestra un...

CVE-2006-3392

CVE-2006-3392 About the vulnerability A vulnerability has been reported in Webmin and Usermin, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an unspecified error within the handling of an URL. This can be exploited to...

Versa Concerto API Path Based - Authentication Bypass

Authentication bypass in the Versa Concerto API, caused by URL decoding inconsistencies. It allowed unauthorized access to certain API endpoints by manipulating the URL path.This issue enabled attackers to bypass authentication controls and access restricted resources. id: CVE-2025-34027 info:...

Docassemble - Local File Inclusion

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the mast...

CVE-2021-42013-EXPLOIT

🚨 CVE-2021-42013 - Apache 2.4.49 & 2.4.50 Remote Code Execution 🚨 CVE-2021-42013 builds upon the previously identified vulnerability, CVE-2021-41773. Despite the Apache team's efforts to address CVE-2021-41773 in version 2.4.50, subsequent investigations revealed that the fix fell short of fully...

shiro-cve-2010-3863

apach shiro path traversal CVE-2010-3863 Reproducción de la vulnerabilidad Montar el entorno localmente con docker Abrir yakit para capturar paquetes payload:/./admin/ Éxito...

-CVE-2025-0133-GlobalProtect-XSS

mitsecvpnxssexploit 🔓 Exploit para el endpoint SSL VPN de GlobalProtect /ssl-vpn/getconfig.esp que añade un payload XSS manipulado a la URL. Uso python3 exploit.py -u https://target.com Parámetros -u, --url: URL base del objetivo no incluyas parámetros de consulta Vista previa del payload...

CVE-2019-19781-Checker

Comprobador CVE-2019-19781 Compruebe si su sitio web es vulnerable a CVE-2019-19781 VISITE https://citrix-checker.com PARA COMPROBAR SI ES VULNERABLE A CVE-2019-19781 POR FAVOR, USE NUESTRO COMPROBADOR DOS VECES PARA ASEGURARSE Este sitio web le proporciona los resultados si su servicio es...

PoC-CVE-2025-52913

CVE-2025-52913 - Vulnerabilidad de Normalización de Rutas en MiCollab 📌 Descripción general Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-52913 , una vulnerabilidad de normalización de rutas que afecta a Mitel MiCollab. El problema permite a atacantes no autenticados evadir l...

backdoor.mirai.helloworld

Al agregar una cadena después de '? image' en la URL del router Dasan GPON...

EUVD-2026-77692

OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP sender-controlled service.name resource...

CVE-2026-90790 a2aproject a2a-python Push Notification Sender base_push_notification_sender.py _dispatch_notification server-side request forgery

A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affects the function dispatchnotification of the file src/a2a/server/tasks/basepushnotificationsender.py of the component Push Notification Sender. The manipulation of the argument pushinfo.url leads to...

EUVD-2026-77535

A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affects the function dispatchnotification of the file src/a2a/server/tasks/basepushnotificationsender.py of the component Push Notification Sender. The manipulation of the argument pushinfo.url leads to...

CVE-2023-24034

An issue was discovered in twilioajaxhandler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability...

CVE-2026-19651

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input...

CVE-2026-85106 NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery

A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the component Link Title Fetch. Such manipulation of the argument url leads to server-side request forgery. The attack can be launch...

EUVD-2026-70413

A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the component Link Title Fetch. Such manipulation of the argument url leads to server-side request forgery. The attack can be launch...

PT-2026-85009

A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the component Link Title Fetch. Such manipulation of the argument url leads to server-side request forgery. The attack can be launch...

CVE-2026-73734

An unauthenticated open redirect vulnerability exists in the web-based management interface of HPE Networking Fabric Composer , allowing a remote attacker to redirect users to an arbitrary URL. The vulnerability requires user interaction but no prior authentication, carrying a CVSS 3.1 score of 5...