SSRF-CVE-2020-15002

सारांश /appsuite/api/oxodocumentfilter&action=addfile को संभालते समय लागू की गई URL सत्यापन तर्क में तीन दोष हैं जिनका उपयोग टाइम ऑफ़ चेक टाइम ऑफ़ यूज़ ToCToU SSRF हमले को निष्पादित करने के लिए किया जा सकता है। यह समस्या दुर्भावनापूर्ण अभिनेताओं को आंतरिक नेटवर्क सेवाओं पर HTTP GET अनुरोध निष्पाद...

CVE-2026-75797

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

EUVD-2026-66281

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

CVE-2026-75797 AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

swagger-ui

परिचय: Swagger UI की भूमिका Swagger UI एक व्यापक रूप से उपयोग की जाने वाली लाइब्रेरी है जो OpenAPI पूर्व में Swagger विनिर्देशों को एक इंटरैक्टिव वेब इंटरफ़ेस में प्रस्तुत करती है। यह डेवलपर्स और इंटीग्रेटर्स को बैकएंड कार्यान्वयन के बिना API का अन्वेषण और परीक्षण करने में सक्षम बनाती है।...

CVE-2026-73335

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme CWE-939. A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be...

CVE-2026-52776

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

next_js_poisoning

CVE-2024-4698 ist eine Cache-Poisoning-Schwachstelle in Next.js, die die Versionen 13.5.1 bis 13.5.7 sowie 14.0.0 bis 14.2.10 betrifft. Das Problem tritt auf, wenn Websites die next/image?url=-API mit dem Parameter ?url= verwenden, was Angreifern ermöglicht, Bilder zu laden, die auf ihren eigenen...

CVE-2026-73335

Myna Point (an Android application, package jp.go.soumu.mkpf.mkpfmypage) is vulnerable to Improper Authorization (CWE-939) in its handler for a custom URL scheme . A malicious application already installed on the same device can send an Intent to the affected app, potentially causing arbitrary Ja...

EUVD-2026-66243

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme CWE-939. A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be...

CVE-2026-73335

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme CWE-939. A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be...

EUVD-2026-66230

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

ICT287_CVE-2022-30190_Exploit

ICT287CVE-2022-30190Exploit Progetto sullo sfruttamento e sulle strategie di mitigazione della vulnerabilità CVE-2022-30190 📌 Informazioni Questo repository contiene il mio progetto finale per ICT287, in cui esploro la vulnerabilità CVE-2022-30190 "Follina". Il progetto comprende: Analisi...

HeartBleed-Vulnerability-Checker

HeartBleed-Vulnerability-Checker author = 'WaQas-JaMal' Dimostrazione rapida e approssimativa di CVE-2014-0160 di Jared Stafford [email protected] e l'autore rinuncia al copyright su questo codice sorgente. ''' Ho modificato questo script per accettare qualsiasi file di URL come input...

exploit-CVE-2016-8016-25

McAfee Virus Scan per Linux: molteplici vulnerabilità remote QUESTO EXPLOIT E TUTTO IL CODICE IN QUESTO REPO SONO STATI RIMOSSI PER EVITARE QUALSIASI PROBLEMA RELATIVO ALLA VIOLAZIONE DI QUALSIASI LICENZA MCAFEE McAfee VirusScan Enterprise for Linux è una soluzione antivirus aziendale di McAfee. ...

CVE-2021-42013-EXPLOIT

🚨 CVE-2021-42013 - Apache 2.4.49 e 2.4.50 Esecuzione Remota di Codice 🚨 CVE-2021-42013 si basa sulla vulnerabilità precedentemente identificata, CVE-2021-41773. Nonostante gli sforzi del team di Apache per affrontare CVE-2021-41773 nella versione 2.4.50, indagini successive hanno rivelato che la...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram नोट्स ऑडियो लीकेज URL निष्कर्षण के माध्यम से ठीक किया गया और पुरस्कृत 🛡️ भेद्यता सारांश 05/2025 में, मैंने इंस्टाग्राम वेब में एक भेद्यता खोजी जो किसी भी उपयोगकर्ता को एक नोट से मूल वीडियो फ़ाइल निकालने और पृष्ठभूमि ऑडियो तक पहुँचने की अनुमति देती थी, जो सार्वजनिक रूप से उपलब्ध नहीं...

CVE-2020-35262

CVE-2020-35262: XSS persistente nel router Digisol DG-HR3400 Descrizione della vulnerabilità È stato identificato che l'endpoint vulnerabile non dispone di validazione degli input lato server né di filtraggio lato client per l'iniezione di script dannosi. Un aggressore può utilizzare questa...

dorkScanner

DORK SCANNER Un tipico scanner di dork per motori di ricerca che analizza i motori di ricerca con query fornite dall'utente per trovare URL vulnerabili. Introduzione Il dorking è una tecnica utilizzata da redazioni, organizzazioni investigative, auditor di sicurezza e criminali informatici espert...

CVE-2026-64849

CVE-2026-64849 Altro root@kitploit: POST /api/2.0/mlflow/webhooks HTTP/1.1 Host: Content-Type: application/json "url": "https://httpbin.org/redirect-to?url=http://169.254.169.254/latest/meta-data/", "name": "poc", "events": "action": "CREATED", "entity": "REGISTEREDMODEL" root@kitploit: POST...