CVE-2021-24891-Simulation

A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...

vulnerability-url

vulnerability-url WARNING! Only for tests and education! https://github.com/nu11secur1ty/vulnerability-url/raw/main/Calculator512.exe...

CLSA-2026-1792928671 Fix CVE(s): CVE-2026-4786

SECURITY UPDATE: command-line option injection in webbrowser.open through a URL whose "%action" substitution yields a leading dash - debian/patches/CVE-2026-4519.patch: carries the fix, applied since tuxcare.els1: Lib/webbrowser.py UnixBrowser.open checks the URL after the %action substitution -...

CVE-2026-116044

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads to unrestricted upload. It is possible to initiate the...

CVE-2023-41425

CVE-2023-41425 Writing one because the one I found isn't working Usage python3 exploit.py http://example.com/loginURL 10.10.xx.xx 9001...

EUVD-2026-109338

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads to unrestricted upload. It is possible to initiate the...

CVE-2026-116044

A security vulnerability exists in prasathmani TinyFileManager versions up to 2.6 . The issue is located within an unknown functionality of the tinyfilemanager.php file, specifically affecting the Remote URL File Upload Module . This vulnerability allows for unrestricted upload of files, which ca...

CVE-2023-40037

CVE-2023-40037: Incomplete Validation of JDBC and JNDI Connection URLs in Apache NiFi Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs...

CVE-2021-36750

CVE-2021-36749 About - In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server...

CVE-2026-113491

The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when saving a front-end listing, allowing users with Subscriber-level access and above to read files from outside the web root and to delete files on the server, limit...

CLSA-2026-1790168428 git-lfs: Fix of 4 CVEs

rebuild with golang 1.22.9-1.el92.tuxcare.els26 to fix Go standard library CVEs - CVE-2026-33818: enforce a maximum recursion depth in parseField and parseSequenceOf in encoding/asn1, so a deeply nested crafted DER payload can no longer exhaust the stack while unmarshalling - CVE-2026-56860:...

CVE-2024-4577

CVE-2024-4577: Critical Vulnerability in PHP's CGI Configurations A severe security flaw exists in PHP's CGI mode that allows attackers to run arbitrary commands by manipulating URL parameters. Impacted Versions PHP versions before 7.4.29 and 8.0.19 on Windows running php-cgi. Attack Methodology...

CVE-2020-3187-Scanlist

CVE-2020-3187-Scanlist - Cisco Batch scanning site. Disclaimer: I am not responsible for the use of this tool or any damages, DO NOT USE THIS FOR ILLEGAL PURPOSES. This tool was designed to scan for authorised assets to automate the check for this vulnerability on multiple cisco instances. Instal...

MAL-2026-18318 Malicious code in @greenlake/mfe-login-url (npm)

@greenlake/mfe-login-url is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 2.0.0, 1.0.0, 3.0.0 has a postinstall script that runs node beacon.cjs on np...

Malicious code in @greenlake/mfe-login-url (npm)

@greenlake/mfe-login-url is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 2.0.0, 1.0.0, 3.0.0 has a postinstall script that runs node beacon.cjs on np...

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection Spring Security OAuth 2.3 Open Redirection 分析复现篇 Exploit Title: Open Redirector in spring-security-oauth2 Date: 17 June 2019 Exploit Author: Riemann Vendor Homepage: https://spring.io/projects/spring-security-oauth Software Link:...

CVE-2026-115730

i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl that allows attackers to redirect translation requests by supplying an ns value starting with a slash. Attackers controlling the namespace value can form a protocol-relative URL in loadPath or addPath templates to load...

CVE-2026-50053 Zimbra Collaboration Suite RestFilter Request Attribute Override via Unauthenticated URL Parameters

A request attribute override vulnerability in Zimbra Collaboration Suite ZCS allows unauthenticated requests to /h/ to populate servlet attributes intended for trusted internal dispatch. RestFilter copies URL parameters specifying an authentication token, target account, target item and dispatch...

CVE-2026-50053

The Zimbra Collaboration Suite (ZCS) contains a request attribute override vulnerability where unauthenticated requests to /h/* can populate servlet attributes used for trusted internal dispatch. The RestFilter component improperly copies URL parameters—including authentication tokens , target ac...

CVE-2026-115730 i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl

i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl that allows attackers to redirect translation requests by supplying an ns value starting with a slash. Attackers controlling the namespace value can form a protocol-relative URL in loadPath or addPath templates to load...