PT-2026-125385

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompress message data in compress brotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a comple...

sferriol-wamp (0.1.0) potentially affected by CVE-2026-77528 via autobahn (22.1.1)

autobahn PYPI version 22.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - sferriol-wamp 0.1.0 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

sferriol-wamp (0.1.0) potentially affected by CVE-2026-77528 via autobahn (22.1.1)

autobahn PYPI version 22.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - sferriol-wamp 0.1.0 Source cves: CVE-2026-77528 Source advisory: OSV:GHSA-HXP9-W8X3-P566...

WAMP Xdebug - Detect

WAMP Xdebug was detected. !/usr/bin/env python3 -- coding: utf-8 -- """WAMP Xdebug was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WAMP Xdebug - Detect', 'description': 'WAMP Xdebug was detected.',...

default-wamp-server-page Detection

Wamp default page will expose sensitive configuration and vhosts. !/usr/bin/env python3 -- coding: utf-8 -- """Wamp default page will expose sensitive configuration and vhosts.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

com.izivia:ocpp-toolkit (>=1.3.0, <=2.0.2), com.izivia:ocpp-transport-soap (>=1.3.0, <=2.0.2) +83 more potentially affected by unknown CVE via org.http4k:http4k-core (5.13.8.0)

org.http4k:http4k-core MAVEN version 5.13.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - com.izivia:ocpp-toolkit =1.3.0, =1.3.0, =1.3.0, =1.3.0, =2.0.2 - com.slack.api:bolt-http4k 1.38.2 -...

EUVD-2022-39271

Malicious code in bioql PyPI...

CVE-2022-36565

Incorrect access control in the install directory C:\Wamp64 of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...

Curfew e-Pass Management System 1.0 - FromDate SQL Injection Vulnerability

Exploit Title: Curfew e-Pass Management System 1.0 - FromDate SQL Injection Exploit Author: Puja Dey Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/curfew-e-pass-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Windows 10/Wamp 1 login into the...

Curfew e-Pass Management System 1.0 - FromDate SQL Injection

Exploit Title: Curfew e-Pass Management System 1.0 - FromDate SQL Injection Date: 28/9/2023 Exploit Author: Puja Dey Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/curfew-e-pass-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Windows 10/Wamp 1 login...

CVE-2022-36565

Incorrect access control in the install directory C:\Wamp64 of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...

CVE-2022-36565

Incorrect access control in the install directory C:\Wamp64 of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...

CVE-2022-36565

Incorrect access control in the install directory C:\Wamp64 of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...

Improper access control

Incorrect access control in the install directory C:\Wamp64 of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...

CVE-2022-36565

Incorrect access control in the install directory C:\Wamp64 of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...

CVE-2022-36565

WampServer (Windows) vulnerability CVE-2022-36565 affects Wamp versions 3.2.6 and earlier due to incorrect access control in the installation directory (C:\Wamp64). An authenticated attacker could overwrite binaries in that directory to achieve arbitrary code execution. Exploitation requires auth...

PT-2022-23473 · Wamp · Wamp

Name of the Vulnerable Software and Affected Versions: Wamp versions 3.2.6 and below Description: The issue is related to incorrect access control in the install directory of Wamp, allowing authenticated attackers to execute arbitrary code by overwriting binaries in the directory. Recommendations...

CVE-2022-36565: Undefined Security Weakness

Incorrect access control in the install directory C:\Wamp64 of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...

Bus Pass Management System 1.0 - 'viewid' SQL Injection

Exploit Title: Bus Pass Management System 1.0 - 'viewid' SQL Injection Date: 2021-08-28 Exploit Author: Aryan Chehreghani Vendor Homepage: https://phpgurukul.com/bus-pass-management-system-using-php-and-mysql Software Link:...

Xwiki CMS 12.10.2 Cross Site Scripting

Exploit Title: Xwiki CMS 12.10.2 - Cross Site Scripting XSS Date: 17-01-2021 Exploit Author: Karan Keswani Vendor Homepage: https://www.xwiki.org/xwiki/bin/view/Main/WebHome Software Link: https://www.xwiki.org/xwiki/bin/view/Download/ Version: Xwiki CMS- 12.10.2 Tested on: Windows 10 Description...