CVE-2026-75797 AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

swagger-ui

परिचय: Swagger UI की भूमिका Swagger UI एक व्यापक रूप से उपयोग की जाने वाली लाइब्रेरी है जो OpenAPI पूर्व में Swagger विनिर्देशों को एक इंटरैक्टिव वेब इंटरफ़ेस में प्रस्तुत करती है। यह डेवलपर्स और इंटीग्रेटर्स को बैकएंड कार्यान्वयन के बिना API का अन्वेषण और परीक्षण करने में सक्षम बनाती है।...

CVE-2026-73335

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme CWE-939. A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be...

CVE-2026-52776

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

next_js_poisoning

CVE-2024-4698 ist eine Cache-Poisoning-Schwachstelle in Next.js, die die Versionen 13.5.1 bis 13.5.7 sowie 14.0.0 bis 14.2.10 betrifft. Das Problem tritt auf, wenn Websites die next/image?url=-API mit dem Parameter ?url= verwenden, was Angreifern ermöglicht, Bilder zu laden, die auf ihren eigenen...

CVE-2026-73335

Myna Point (an Android application, package jp.go.soumu.mkpf.mkpfmypage) is vulnerable to Improper Authorization (CWE-939) in its handler for a custom URL scheme . A malicious application already installed on the same device can send an Intent to the affected app, potentially causing arbitrary Ja...

EUVD-2026-66243

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme CWE-939. A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be...

CVE-2026-73335

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme CWE-939. A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be...

EUVD-2026-66230

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

ICT287_CVE-2022-30190_Exploit

ICT287CVE-2022-30190Exploit Progetto sullo sfruttamento e sulle strategie di mitigazione della vulnerabilità CVE-2022-30190 📌 Informazioni Questo repository contiene il mio progetto finale per ICT287, in cui esploro la vulnerabilità CVE-2022-30190 "Follina". Il progetto comprende: Analisi...

HeartBleed-Vulnerability-Checker

HeartBleed-Vulnerability-Checker author = 'WaQas-JaMal' Dimostrazione rapida e approssimativa di CVE-2014-0160 di Jared Stafford [email protected] e l'autore rinuncia al copyright su questo codice sorgente. ''' Ho modificato questo script per accettare qualsiasi file di URL come input...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Weblogic Unbefugte Umgehung RCE CVE-2020-14882 Oracle Weblogic Unbefugte Umgehung RCE Testskript Es funktioniert mit Python3 Anfragen root@kitploit: POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

CVE-2021-42237-SiteCore-XP

CVE-2021-42237-SiteCore-XP Allo stesso modo, inserisci gli URL da rilevare in target.txt Registrati e configura autonomamente la piattaforma DNSLOG...

exploit-CVE-2016-8016-25

McAfee Virus Scan per Linux: molteplici vulnerabilità remote QUESTO EXPLOIT E TUTTO IL CODICE IN QUESTO REPO SONO STATI RIMOSSI PER EVITARE QUALSIASI PROBLEMA RELATIVO ALLA VIOLAZIONE DI QUALSIASI LICENZA MCAFEE McAfee VirusScan Enterprise for Linux è una soluzione antivirus aziendale di McAfee. ...

porterminal

Consegna un computer a un agente, pieno controllo, e guardalo. Un comando, un URL. Anche un terminale curato per il tuo telefono. 1. uvx ptn 2. Passa l'URL a un agente AI, oppure scansiona tu il QR 3. Guardalo lavorare in qualsiasi browser e prendi il controllo quando vuoi...

urx

Estrae URL da archivi OSINT per approfondimenti sulla sicurezza. Urx è uno strumento da riga di comando progettato per raccogliere URL da archivi OSINT, come Wayback Machine e Common Crawl. Costruito con Rust per l'efficienza, sfrutta l'elaborazione asincrona per interrogare rapidamente molteplic...

CVE-2021-42013-EXPLOIT

🚨 CVE-2021-42013 - Apache 2.4.49 e 2.4.50 Esecuzione Remota di Codice 🚨 CVE-2021-42013 si basa sulla vulnerabilità precedentemente identificata, CVE-2021-41773. Nonostante gli sforzi del team di Apache per affrontare CVE-2021-41773 nella versione 2.4.50, indagini successive hanno rivelato che la...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram नोट्स ऑडियो लीकेज URL निष्कर्षण के माध्यम से ठीक किया गया और पुरस्कृत 🛡️ भेद्यता सारांश 05/2025 में, मैंने इंस्टाग्राम वेब में एक भेद्यता खोजी जो किसी भी उपयोगकर्ता को एक नोट से मूल वीडियो फ़ाइल निकालने और पृष्ठभूमि ऑडियो तक पहुँचने की अनुमति देती थी, जो सार्वजनिक रूप से उपलब्ध नहीं...

sage

Sage Sicherheit für Agents — Agentenerkennung & -reaktion für KI‑Programmierassistenten Sage ist eine leichtgewichtige Sicherheitsschicht, die KI‑Agenten vor der Ausführung gefährlicher Aktionen schützt. Es fängt Tool‑Aufrufe ab – Shell‑Befehle, URL‑Abrufe, Dateischreibvorgänge – und prüft sie vo...

POC-CVE-2021-41773

POC-CVE-2021-41773 No dia 5 de outubro de 2021, foi divulgado um CVE detalhando um ataque de path traversal no Apache HTTP Server v2.4.49. Atribuído o número CVE-2021-41773, foi lançado com a seguinte descrição: Foi encontrada uma falha numa alteração feita na normalização de caminhos no Apache...