geoserver-

GeoServer CVE-2024-36401 Exploitation Tool GeoServer CVE-2024-36401 Environment: JDK8 Disclaimer: For authorized testing only. The author bears no responsibility for any consequences caused by user misuse. Please comply with laws and regulations! 1. Default payload: POST /geoserver/wfs HTTP/1.1...

CVE-2026-46490-samlify-SAML-Attribute-Injection

CVE-2026-46490 — samlify SAML AttributeValue XML Injection → Privilege Escalation samlifyValue — is inserted unescaped , so a normal user can inject extra elements e.g. role=admin into their own, IdP-signed SAML assertion. Because the injection happens before signing, the Service Provider's...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x Under discussion and analysis... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ An attacker who has write access to the KeePass configuration file can modify it and inject malicious...

EUVD-2026-123850

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

EUVD-2026-123834

A xml injection aka blind xpath injection vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request...

EUVD-2026-123851

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126177

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126176

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126162

A xml injection aka blind xpath injection vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request...

CVE-2026-126177

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126176

A xml injection aka blind xpath injection vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through...

CVE-2026-126177

An XML Injection (specifically Blind XPath Injection ) vulnerability exists in FortiAnalyzer , FortiAnalyzer Cloud , FortiManager , and FortiManager Cloud across multiple versions (including 8.0.0, 7.6.x, 7.4.x, and 7.2.x). This vulnerability allows an unauthenticated remote attacker to inject ar...

CVE-2026-126176

A XML injection (specifically Blind XPath Injection , CWE-91) vulnerability exists in several Fortinet products, including FortiAnalyzer , FortiAnalyzer Cloud , FortiManager , and FortiManager Cloud . The flaw allows an unauthenticated remote attacker to inject arbitrary content into a signed SAM...

CVE-2026-126162

A blind XPath injection (XML Injection) vulnerability exists in the FortiMail Exchange Integration component of Fortinet FortiMail versions 8.0.0 through 8.0.1 and 7.6.0 through 7.6.6. A remote unauthenticated attacker could exploit this flaw by sending a specially crafted request to execute unau...

CVE-2026-126162

A xml injection aka blind xpath injection vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: TP-Link Router OS Command Injection For more Information see https://vulners.com/cve/CVE-2026-3227 A persistent, authenticated OS Command Injection vulnerability in TP-Link router firmware leading to device bricking or potential LAN takeover. Disclaimer : This repository contains...

CVE-2026-34197

CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...

CVE-2026-91878

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

CVE-2026-91878

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

CVE-2026-91878

Dell OpenManage Ansible Modules , versions 6.0.0 through 10.0.3 , are vulnerable to an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability within the XML data conversion component . A low privileged attacker with remote access could exp...