xiaomi-cve-2024-45352

xiaomi-cve-2024-45352 关于小米严重漏洞的技术报告 漏洞摘要 在多种 MIUI 设备上的小米默认浏览器（com.android.browser）中发现了一个漏洞。该应用未能正确验证通过 startActivity 传递的 Intent，从而允许恶意应用打开任意 URL 或执行非预期操作。 CVE 编号 : CVE-2024-45352 组件 :com.android.browser 严重性 : 中危 状态 : 已报告给小米（等待确认） 发现日期 : 2008年4月24日 🔥 概念验证 PoC 1. 使用以下 Intent 创建一个简单的恶意应用： Intent...

CVE-2023-41898_Lab

CVE-2023-41898 Unvalidated Deep Link Lab Laboratorio educativo de reproducción reducida creado a partir del informe de vulnerabilidad pública GHSL-2023-142 de Home Assistant Companion for Android y de la estructura de código abierto de la versión vulnerable 2023.8.2. No se utilizan servidores,...

CVE-2026-75431_PowerJob_jwt_key_predictable

Clave de Firma JWT de PowerJob Predecible Clave Derivada de la URL JDBC Predeterminada → Falsificación de Tokens 1. Resumen La clave de firma JWT HS256 del servidor PowerJob se deriva decodificando en BASE64 una constante codificada concatenada con el MD5 de la URL JDBC predeterminada...

CVE-2026-94483

The Next.js React framework (versions 16.0.0 through 16.3.8 ) contains a Server-Side Request Forgery (SSRF) vulnerability within the Image Optimization component. The root cause is that the framework can follow attacker-controlled DNS resolution for remote URLs that match images.remotePatterns. T...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

安全通告：rouille 中 URL 前缀处理的可达断言导致远程拒绝服务 分配的 CVE 编号： CVE-2026-66754 摘要 Request::removeprefix 检查的是百分号解码后的 URL，但断言的是原始 URL。如果一个请求的解码后路径以该前缀开头，但其原始路径并非如此，那么该请求会通过检查，却在断言处失败。只需对前缀中的一个字符进行百分号编码即可。 在默认构建下，panic 会被捕获并变成 500 响应。在启用 panic = "abort" 的构建中，没有任何机制可以捕获它，一次未认证的 GET 请求就会终止服务器进程。 受影响版本 仓库...

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382：QNAP 密码重置导致账户接管 未经身份验证的攻击者控制的密码重置 URL，位于 /cgi-bin/resetpassword.cgi。 在实验室环境中针对 QuTScloud c5.2.4.3041 build 20250211 进行了测试。QNAP 后来将此漏洞发布为 CVE-2025-59382，公告编号 QSA-26-10。 简述 具有本地网络访问权限或能够访问暴露的 NAS 管理界面的未认证攻击者，可以通过操纵 /cgi-bin/resetpassword.cgi 中 sendmail 函数的 url 参数，将任意 URL 注入到官方 QNAP...

CVE-2026-104464

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying an unvalidated actor URL to the Bazar abonnements sync action. Attackers can target internal hosts or cloud metadata endpoints and chain...

EUVD-2026-91481

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in the Bazar valeur action that allows page editors to make the server fetch arbitrary URLs. Attackers can supply loopback or internal URLs in the url parameter to probe internal services and inject unescaped remote HTML th...

CVE-2026-104470 YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url parameter of the Bazar valeur action. Attackers can embed the action with a champ parameter in wiki markup to reach loopback or internal services...

CVE-2026-104470 YesWiki before 4.6.7 SSRF and XSS via Bazar valeur Action

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in the Bazar valeur action that allows page editors to make the server fetch arbitrary URLs. Attackers can supply loopback or internal URLs in the url parameter to probe internal services and inject unescaped remote HTML th...

CVE-2026-104470

Versions of YesWiki before 4.6.7 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the Bazar valeur action . This flaw allows authenticated page editors to force the server to fetch arbitrary URLs by providing them via the url parameter . By embedding this action with a ...

CVE-2026-104470 YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url parameter of the Bazar valeur action. Attackers can embed the action with a champ parameter in wiki markup to reach loopback or internal services...

EUVD-2026-91451

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the valeur action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.p...

CVE-2026-104441

Versions of YesWiki prior to 4.6.7 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause lies in the {{valeur}} action's url parameter, which allows remote attackers to force the server to fetch content from arbitrary hosts and ports. By submitting the action th...

axios: Axios: Denial of Service via malformed data URLs

A flaw was found in Axios. A remote attacker can exploit this vulnerability by supplying a crafted data URL containing repeated slash characters to an application that processes untrusted inputs. Due to an inefficient regular expression used to parse the URL, handling the malformed input triggers...

axios: Axios: Denial of Service via malformed data URLs

A flaw was found in Axios. A remote attacker can exploit this vulnerability by supplying a crafted data URL containing repeated slash characters to an application that processes untrusted inputs. Due to an inefficient regular expression used to parse the URL, handling the malformed input triggers...

CVE-2026-85492

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via URL Pathname in all versions up to, and including, 5.0.1.1 due to insufficient input sanitization and output...

Blind-XSS-Manager

Blind-XSS-Manager Nunca olvides dónde inyectas. Descripción Una extensión de Chrome que realiza un seguimiento de la URL inyectada con payloads de Blind XSS. Añade un valor único para cada payload asignado a la URL y la extensión lo registra cuando se copia. Los payloads son casi los mismos que l...

CVE-2026-85492 All in One SEO <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting via URL Pathname

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via URL Pathname in all versions up to, and including, 5.0.1.1 due to insufficient input sanitization and output...

EUVD-2026-91336

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via URL Pathname in all versions up to, and including, 5.0.1.1 due to insufficient input sanitization and output...