CVE-2026-85706-gitlab-poc

CVE-2026-85706 Description GitLab CE/EE unauthenticated arbitrary file read vulnerability CVE-2026-85706. Affected versions: GitLab CE/EE 18.7 – 19.1.7 GitLab CE/EE 19.2.0 – 19.2.5 GitLab CE/EE 19.3.0 – 19.3.1 Patched versions: GitLab 19.1.8 GitLab 19.2.6 GitLab 19.3.2 Vulnerability Details The...

CVE-2026-54356

CVE-2026-54356 — Budibase: authenticated arbitrary S3 signed upload URL issuance A low-privilege BASIC role authenticated user of a published Budibase workspace can call POST /api/attachments/:datasourceId/url and obtain an S3 pre-signed upload URL signed with the workspace datasource's server-si...

CVE-2026-101087

Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs, but the denylist did not cover IPv6 transition ranges — specifically the 6to4 prefix 2002::/16 and the local-use IPv4/IPv6 translation prefix 64:ff9b:1::/48. Because...

CVE-2023-42793

About CVE-2023-42793 You will need to obtain the token first through using different exploit. However, the following exploit will allow you to obtain RCE into the Linux server as it encoded the payload in URL and sends it to the server. How to use python3 ./main -t TEAMCITYTOKEN -u...

CVE-2022-30190

CVE-2022-30190 El lunes 30 de mayo de 2022, Microsoft publicó el CVE-2022-30190 sobre la vulnerabilidad de la Herramienta de diagnóstico y soporte de Microsoft MSDT en Windows. Existe una vulnerabilidad de ejecución remota de código cuando se llama a MSDT mediante el protocolo URL desde una...

apache-struts-pwn_CVE-2017-9805

apache-struts-pwn - CVE-2017-9805 Exploit Un exploit para Apache Struts CVE-2017-9805 Uso Comprueba si la vulnerabilidad existe en una sola URL. python apache-struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' Comprueba si la vulnerabilidad existe en una lista de URLs. python...

thingsboard-ssrf-cve-2025-34282

CVE-2025-34282 — ThingsBoard SSRF via SVG Image Upload Overview Server-Side Request Forgery SSRF vulnerability in ThingsBoard IoT Platform versions before 4.2.1. An attacker with Tenant Admin access can upload a crafted SVG file containing an internal URL reference via the Image Upload Gallery...

CVE-2025-55752

CVE-2025-55752: Vulnerabilidad de Path Traversal en Apache Tomcat Entorno de reproducción basado en Docker para recrear la vulnerabilidad de path traversal CVE-2025-55752 en Apache Tomcat 10.1.44. Resumen CVE-2025-55752 es una vulnerabilidad de path traversal en el componente RewriteValve de Apac...

CVE-2023-27163---SSRF-Baskets-Requests

CVE-2023-27163---SSRF-Baskets-Requests Creado por TheAlchimist cve-2023-27163-ssrfbaskets.py ejemplo : cve-2023-27163-ssrfbaskets.py http://mysite.com http://localhost...

SealSecurity_Exam

SealSecurityExam La contaminación de prototipos es una vulnerabilidad de JavaScript que permite a un atacante agregar propiedades arbitrarias a los prototipos de objetos globales, que luego pueden ser heredadas por objetos definidos por el usuario. Una fuente de contaminación de prototipos es...

CVE-2026-88774

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP...

CVE-2026-101061

The utcp-gql and utcp-websocket libraries, in versions before 1.1.1 , are vulnerable to server-side request forgery (SSRF) . The vulnerability stems from an incomplete application of fixes for CVE-2026-44661. Specifically, the GraphQL plugin utilizes a flawed prefix check that allows bypasses usi...

CVE-2026-101061 utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass

utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugi...

CVE-2026-101061 utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass

utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugi...

EUVD-2026-87984

utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a generated OAuth2-protected tool, the librar...

CVE-2026-101057 utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL

utcp-mcp the MCP plugin of python-utcp through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensuresecureurl validation that the HTTP-family plugins apply, so the HTTPS/WSS-or-loopback rule is not enforced. A call template...

CVE-2024-0195

Insignias Licencia MIT Instalación 1. Instale Python3 y pip Instrucciones aquí Si no puede resolver esto, realmente no debería estar usando esto Instalar via pip pip install CVE-2024-0195 Ejecute el siguiente comando para verificar CVE-2024-0195 -h Configuraciones 2. Integramos con la API de...

CVE-2023-24044

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes hacer esto, realmente no deberías estar usando esto Instalar mediante pip pip install CVE-2023-24044 Ejecuta el siguiente comando para verificar CVE-2023-24044 -h Configuraciones 2. Nos integramos con la A...

EUVD-2026-87960

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP...

CVE-2026-88774

CVE-2026-88774 is a policy bypass vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway caused by improper HTTP URL based expression usage. The flaw affects appliances where any policy utilizes these expressions. To remediate, users should upgrade to NetScaler ADC/Gateway 14.1-73.37 ...