Werkzeug-CVE-2022-29361-PoC

Werkzeug-CVE-2022-29361-PoC...

CVE-2023-49438

CVE-2023-49438 Proof of Concept Описание Уязвимость открытого перенаправления в пакете python Flask-Security-Too версии =5.3.2 позволяет злоумышленникам перенаправлять ничего не подозревающих пользователей на вредоносные сайты с помощью специально созданного URL-адреса, используя параметр ?next н...

CVE-2026-27199-werkzeug-safe-join-bypass-PoC

CVE-2026-27199 PoC: Werkzeug safejoin Windows 장치 이름 우회 상태: 공개적으로 공개됨. werkzeug 3.1.6 에서 수정됨. 심각도: 보통 보고자: @alimezar 권고: GHSA-29vq-49wr-vm6x 영향을 받는 버전...

CVE-2019-14322

CVE-2019-14322 Modificação do exploit de faisalfs10x: PoC do CVE-2019-14322: Limitação inadequada de um caminho para um diretório restrito 'Path Traversal' https://www.acunetix.com/vulnerabilities/web/odoo-lfi-cve-2019-14322/ https://nvd.nist.gov/vuln/detail/CVE-2019-14322 Descrição Uma...

CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS

Créditos para @kevin-mizu https://github.com/kevin-mizu/Werkzeug-CVE-2022-29361-PoC/tree/main para detalhes, leia: https://mizu.re/post/abusing-client-side-desync-on-werkzeug Testado no Chromium 119.0.6045.123 compilado em Debian trixie/sid, rodando em Debian kali-rolling...

Pallets Werkzeug <0.15.5 - Local File Inclusion

Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. id: CVE-2019-14322 info: name: Pallets Werkzeug 0.15.5 - Local File Inclusion author: madrobot severity: high description: | Pallets Werkzeug...

http-vuln-cve2019-14322.nse

http-vuln-cve2019-14322.nse سكريبت NSE لأداة Nmap لاكتشاف CVE-2019-14322 الخاص بـ Pallets Werkzeug المتعلق بـ path traversal عبر SharedDataMiddleware الذي يعالج أسماء محركات الأقراص مثل C: بشكل خاطئ في مسارات ويندوز. الوصف CVE-2019-14322 - تم العثور على ثغرة أمنية في Pallets Werkzeug حتى إصدار...

CVE-2019-14322-scanner

CVE-2019-14322-scanner Una vulnerabilità è stata trovata in Pallets Werkzeug fino alla versione 0.15.4. È stata dichiarata critica. Questa vulnerabilità interessa la funzione SharedDataMiddleware del componente Windows. La manipolazione con un input sconosciuto porta a una vulnerabilità di...

WerkGhost

WerkGhost Exploit per Werkzeug -p -d --timeout -t Esempio...

ROOT-APP-PYPI-CVE-2024-34069 CVE-2024-34069 in Werkzeug - Patched by Root

Root has patched CVE-2024-34069 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-46136 CVE-2023-46136 in Werkzeug - Patched by Root

Root has patched CVE-2023-46136 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-49767 CVE-2024-49767 in Werkzeug - Patched by Root

Root has patched CVE-2024-49767 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-25577 CVE-2023-25577 in Werkzeug - Patched by Root

Root has patched CVE-2023-25577 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...

PYSEC-2026-3417 Werkzeug possible resource exhaustion when parsing file data in forms

Applications using Werkzeug to parse multipart/form-data requests are vulnerable to resource exhaustion. A specially crafted form body can bypass the Request.maxformmemorysize setting. The Request.maxcontentlength setting, as well as resource limits provided by deployment software and platforms,...

PYSEC-2026-1860 Werkzeug possible resource exhaustion when parsing file data in forms

Applications using Werkzeug to parse multipart/form-data requests are vulnerable to resource exhaustion. A specially crafted form body can bypass the Request.maxformmemorysize setting. The Request.maxcontentlength setting, as well as resource limits provided by deployment software and platforms,...

PYSEC-2026-2043 Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it...

PYSEC-2026-1065 Pallets Werkzeug vulnerable to Path Traversal

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names such as C: in Windows pathnames...

ROOT-APP-PYPI-CVE-2025-66221 CVE-2025-66221 in rootio-Werkzeug - Patched by Root

Root has patched CVE-2025-66221 in the rootio-Werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-27199 CVE-2026-27199 in rootio-werkzeug - Patched by Root

Root has patched CVE-2026-27199 in the rootio-werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-21860 CVE-2026-21860 in rootio-Werkzeug - Patched by Root

Root has patched CVE-2026-21860 in the rootio-Werkzeug package for Root:PyPI. Multiple fixed versions available...