CVE-2024-2997

CVE-2024-2997 スキャナー 概要 CVE-2024-2997 スキャナーは、Webアプリケーションのコマンドインジェクション脆弱性を検出するために設計された高度な脆弱性スキャナーです。このツールは、セキュリティ専門家がアプリケーションの潜在的なセキュリティリスクを特定するのに役立ちます。 免責事項 このツールは教育目的のみ を対象としています。所有しているアプリケーション、またはテストの許可を得たアプリケーションに対してのみ使用してください。作者は、このツールの誤用またはそれによって生じた損害について一切責任を負いません。 特徴 高性能スキャン :...

CVE-2026-102333

A flaw was found in httpdbg. The application fails to validate URL schemes in recorded HTTP request URLs before rendering them as clickable links in the web interface. An attacker who controls traffic recorded by httpdbg can supply a link containing malicious scripts, leading to stored Cross-Site...

CVE-2026-102249

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2026-102249

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

EUVD-2026-88628

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2026-102249 REBUILD file-editor-save authorization

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2026-102249

A security flaw exists in REBUILD up to version 4.4.11 affecting the /commons/file-editor-save file. The root cause is missing authorization when an attacker manipulates the url/fileKey argument. This vulnerability allows for remote attacks , and an exploit has been released to the public. No rem...

CVE-2026-102249 REBUILD file-editor-save authorization

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2026-76720: URL Redirection to Untrusted Site

A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...

CVE-2026-102249: Missing Authorization

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

PT-2026-102496

A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...

PT-2026-102443

A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to...

PT-2026-102959

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description Remote command injection is possible due to improper processing of the url argument within the '/api/ZRnetwork/ping' endpoint. This allows an attacker to execute arbitrary commands on the system...

PT-2026-102729

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

CVE-2026-73599: URL Redirection to Untrusted Site

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2026-53989: URL Redirection to Untrusted Site

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

CVE-2026-92222: Server-Side Request Forgery (SSRF)

Joomla! Core - 20260909 - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs used for serverside requests were improperly validated, leading to SSRF vectors...

EUVD-2026-70282

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority...

CVE-2026-100370

DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl method is responsible for rejecting dangerous URL values in the href and xlink:href attributes. The weakness is that "javascript:" is rejected as a scheme, while "data:" is rejected only when the...

Security Bulletin: Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

Summary Langflow contains multiple Server-Side Request Forgery vulnerabilities across several components where authenticated users can supply attacker-controlled URLs or database connection strings that reach internal network hosts without adequate validation. The LMStudio model and embeddings...