Lucene search
+L

96 matches found

OSV
OSV
•added 2025/10/27 6:31 p.m.•16 views

GHSA-WMWF-9CCG-FFF5 Apache Tomcat Vulnerable to Relative Path Traversal

The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the request URI to bypass security constraints including the...

7.7CVSS7.1AI score0.64413EPSS
SaveExploits4References13
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•21 views

PT-2025-41466

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange affected versions not specified Description Newforma Info Exchange accepts serialized .NET data via the /remoteweb/remote.rem API endpoint without proper validation. This allows a remote, unauthenticated attacker to...

9.8CVSS7.5AI score0.00923EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2007-6650

Malware in sbrugna...

10CVSS6.1AI score0.01566EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-28180

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00297EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 3:14 p.m.•20 views

CVE-2025-48262

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS5.9AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/19 3:15 p.m.•32 views

CVE-2025-48262

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS0.00297EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/19 2:45 p.m.•33 views

CVE-2025-48262 WordPress Url Rewrite Analyzer plugin <= 1.3.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS0.00297EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/19 2:45 p.m.•49 views

CVE-2025-48262

URL Rewrite Analyzer (WordPress plugin) versions

4.3CVSS5.9AI score0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/19 2:45 p.m.•10 views

CVE-2025-48262 WordPress Url Rewrite Analyzer plugin <= 1.3.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS5.9AI score0.00297EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/19 12:00 a.m.•16 views

PT-2025-21973 · Unknown · Url Rewrite Analyzer

Name of the Vulnerable Software and Affected Versions: Url Rewrite Analyzer versions 1.3.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Url Rewrite Analyz...

4.3CVSS4.4AI score0.00297EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•15 views

WordPress plugin Url Rewrite Analyzer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS4.9AI score0.00297EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•1 views

CVE-2025-48262: Missing Authorization

Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Url Rewrite Analyzer: from n/a through = 1.3.3...

4.3CVSS5.9AI score0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/19 4:18 p.m.•16 views

CVE-2025-0431 Enterprise Protection Backslash URL Rewrite Bypass

Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of...

5.8CVSS5.7AI score0.00409EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/07/19 3:51 a.m.•2065 views

Exploit for Exposure of Resource to Wrong Sphere in Apache Http_Server

🚨Alert🚨Apache Vulnerability 🚨Alert🚨Security Advisory: CVE-2024...

9.1CVSS6.6AI score0.04168EPSS
SaveExploits6
Veracode
Veracode
•added 2024/07/04 11:24 a.m.•21 views

URL Rewrite

zendframework/zendframework is vulnerable to URL Rewrite. The vulnerability is due to the request URI marshaling logic that introspects HTTP request headers specific to server-side URL rewrite mechanisms. When these headers are present on systems not running the specific URL rewriting mechanism,...

7.2AI score
SaveExploits0
Veracode
Veracode
•added 2024/06/26 7:17 a.m.•21 views

URL Rewrite

zendframework/zend-feed is vulnerable to URL Rewrite. The vulnerability is due to marshaling a request URI that includes logic to introspect HTTP request headers specific to a server-side URL rewrite mechanism. The attacker can emulate these headers to request arbitrary content...

7.1AI score
SaveExploits0
Veracode
Veracode
•added 2024/06/26 7:07 a.m.•17 views

URL Rewrite

zendframework/zend-diactoros is vulnerable to URL Rewrite. The vulnerability is due to marshaling a request URI that includes logic to introspect HTTP request headers specific to a server-side URL rewrite mechanism. The attacker can emulate these headers to request arbitrary content...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/06/07 10:07 p.m.•32 views

GHSA-FQ4P-86HH-42V9 Zend-Diactoros URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

4.7CVSS7.2AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/06/07 10:07 p.m.•35 views

Zend-Diactoros URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

7.2AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/07 10:01 p.m.•38 views

Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

7.2AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder