TeamsNTLMLeak

Description When a user navigates to a "Website" tab that directs to a specially designed webpage, it can result in the exposure of the NTLM hash through the activation of an Office URL scheme, thereby reducing the process to a single-click path for the leak. If one attempts to open a link in the...

OutlookLeakTest

The Outlook HTML Leak Test Project! Blog post: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ What's in "./Schemes-List.xlsx"? List of URI schemes that might work in Windows. These schemes/protocols can be useful in...

Gotenberg <= 8.30.1 - Server Side Request Forgery

Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-sensitive regular expression ^https?:// to match URL schemes. Because Go's net/url.Parse normalizes...

CVE-2021-30862

CVE-2021-30862 In 2021, CodeColorist released his writeups on the Mistuned vulnerabilities, a series of vulnerabilities affecting the iTunes Store allowing for one-click remote code execution. Notably, he demonstrated popping calc with no memory corruption at all, but with just a logic bug. Durin...

EUVD-2026-119155

The Modula plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'items' parameter in versions up to, and including, 3.0.17 This is due to insufficient input sanitization of the per-image 'link' field in the savemergeditems REST handler and Images\Adapter::normalizeitemrow,...

CVE-2026-118255

A flaw was found in Highcharts Grid. The component fails to validate URL schemes in credit links, allowing an attacker who controls the grid configuration to inject a malicious JavaScript link. When a user clicks the link, arbitrary script executes within the origin of the hosting web application...

CVE-2026-91901

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery...

CVE-2026-91900

Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...

CVE-2026-91901

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 are susceptible to an Improper Authorization in Handler for Custom URL Scheme vulnerability (CWE-939). A low privileged attacker with remote access could exploit this to perform Client-Side Request Forgery . Remediation is available...

CVE-2026-91901

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery...

EUVD-2026-115459

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery...

EUVD-2026-115455

Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...

CVE-2026-91900

Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...

CVE-2026-91901: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for…

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery...

PT-2026-135811

Dell Alienware Command Center AWCC, versions Versions up to and including 6.14.20.0, contains an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch...

PT-2026-135812

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery...

CLEANSTART-2024-BO25852 Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox

Security vulnerability affects the librewolf package. Navigations through the Android-specific intent URL scheme could have been misused to escape iframe sandbox...

CLEANSTART-2024-FX18211 Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox

Security vulnerability affects the firefox package. Navigations through the Android-specific intent URL scheme could have been misused to escape iframe sandbox...

CVE-2026-118658

Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded-Protocol, or X-Url-Scheme without validating that they are supported web schemes. WWWRedirect and NonWWWRedirect use that value to construct a Location header, so an attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-118658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded- Proto, X-Forwarded-Protocol, or X-Url-Scheme without...