SUSE CVE-2026-67201

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery SSRF bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urllib and net.http. Attackers can craft a URL containing a backslash in the authori...

EUVD-2022-29920

Malicious code in bioql PyPI...

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software, related to bypassing authentication procedures, allows attackers to circumvent security restrictions.

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software relates to bypassing the authentication process when adding the %00currentsetting.htm line to the URL address. Exploiting this vulnerability can allow an attacker to circumvent security restrictions remotely...

Phabricator: Window.opener protection Bypass

SUMMURY ======== If you create a post/comment with a link like http://x.com in fabricator then server add rel="norefferrer" to anchor tag . So child window dont have access to parent window. But it can be bypassed with url like /\x.com/index.php and child window can change the location property o...

CVE-2006-1228

Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier...