CVE-2026-112069

The FAL Protect (fal_protect) extension contains a Broken Access Control vulnerability (CWE-862) when used on websites running TYPO3 14.3 . The extension fails to apply access protection to files within file storages using a non-default relative base path , allowing these files to be served direc...

EUVD-2026-104876

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website...

CVE-2026-112237 Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)

The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the endpoint does not apply the authorization check that protects the other methods, so the URL it fetches is fully controlled by the requester. An unauthenticated attacker can...

CVE-2026-112237

The Kitodo.Presentation extension (dlf) is vulnerable to a Server-Side Request Forgery (SSRF) . The issue stems from a public proxy endpoint that fails to apply authorization checks for one specific HTTP request method. This allows an unauthenticated attacker to force the server to send requests ...

EUVD-2026-104870

The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the endpoint does not apply the authorization check that protects the other methods, so the URL it fetches is fully controlled by the requester. An unauthenticated attacker can...

EUVD-2026-104869

The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files uploaded by other visitors. In addition, the token was show...

CVE-2026-28318-check

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318 , an unauthenticated denial-of-service in SolarWinds Serv-U= 15.5.4.108. A single POST that carries Content-Encoding: deflate and a body feeds that body to an in-memory deflate...

CVE-2025-7775-PoC

CVE-2025-7775 | NetScaler ADC RCE PoC ⚠️ Disclaimer: This is a hypothetical PoC for educational purposes only.Segment NetScaler networks CVE-2025-7775 does not exist. Use only in an isolated lab. Overview Simulated exploit for a hypothetical unauthenticated RCE in Citrix NetScaler ADC/Gateway...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

day04-nexus-4956

Day 4 – Nexus Repository 3 Path Traversal CVE-2024-4956 What: Unauthenticated path traversal lets anyone download arbitrary files with a crafted URL. Vuln: Affects Nexus Repo 3 versions ≤ 3.68.0. Fixed in 3.68.1. Source: Sonatype advisory + NVD. Safety: Lab is local-only. Don’t target systems you...

CVE-2022-47986

CVE-2022-47986 Aspera Faspex Pre Auth RCE https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Poc Usage: python3 poc.py https://xxxxx whoami...

php_filter_chain_generator

PHP filter chain generator A CLI to generate PHP filters chain, get your RCE without uploading a file if you control entirely the parameter passed to a require or an include in PHP! Usage Help $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN --rawbase...

CVE-2026-43841

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function...

CVE-2026-43842

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function when msglen is set to 0...

CVE-2026-11960

Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a valid username compared to an invalid one. An unauthenticated attacker could systematically identify valid usernames by examining variations in the...

buds-audit

buds-audit Version 1.0.0 Bluetooth security assessment tool for wireless earbuds affected by the Airoha SDK vulnerability chain CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702. Scans for nearby devices, fingerprints known-affected Airoha-based chipsets, and probes for unauthenticated GATT access...

CVE-2024-40508

CVE-2024-40508 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMConference.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMConference.asmx function. Vulnerable Product...

CVE-2024-57725

CVE-2024-57725: GPON Link Manipulation Vulnerability in certain Arcadyan Routers Distributed by Orange and Jazztel This repository documents an unauthenticated vulnerability discovered in LiveboxFibra Arcadyan routers distributed by Orange and Jazztel in Spain PRV3399BBLT. The issue lies in the...

CVE-2025-12539

CVE-2025-12539 TNC Toolbox: Web Performance = 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover 🚨 TNC Toolbox: Web Performance = 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover 🛡️ Descriptio...

CVE-2025-47646

🔐 CVE-2025-47646 – PSW Front-end Login & Registration = 1.12 📌 Plugin Information Plugin : PSW Front-end Login & Registration Vulnerable Version : = 1.12 CVE : CVE-2025-47646 Severity : High CVSS 9.8 Vulnerability Type : Broken Authentication Privilege Required : Unauthenticated Patched : ❌ No...