Burp_Collector

Burp Collector Burp Collector is a multi-processing tool that is specifically designed to aid Pentesters and Bug Hunters in Web/Mobile Application testing. With its powerful capabilities, it streamlines the process of collecting and extracting information from Burp Suite files, empowering you to...

AnythingLLM - Information Disclosure

AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...

Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint

The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs that redirect to an external web site via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the...

All Thrive Themes and Plugins - Unauthenticated Option Update

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin...

CVE-2026-122020

A flaw was found in Nstbrowser. A remote attacker could exploit this vulnerability by sending a crafted request to the stopAll API endpoint within the Local Agent Management Service. Successful exploitation allows the attacker to terminate active browser instances, resulting in a Denial of Servic...

EUVD-2026-117886

A server-side request forgery SSRF vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external...

CVE-2026-119433

A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace . The flaw stems from insufficient validation of network parameters and URLs supplied by users. A remote attacker could leverage this to force the server to make requests to arbitrary inte...

CVE-2026-119433: Foxit Software Inc. Foxit Workspace: A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to…

A server-side request forgery SSRF vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external...

CVE-2026-44277

🚨 CVE-2026-44277 - FortiAuthenticator Unauthenticated RCE Critical Unauthenticated Remote Code Execution in Fortinet FortiAuthenticator 📋 Overview CVE-2026-44277 is a critical vulnerability in Fortinet FortiAuthenticator that allows unauthenticated attackers to achieve Remote Code Execution RCE v...

CVE-2026-111612

A flaw was found in netdisk-fast-download. An unauthenticated remote attacker can exploit an information disclosure vulnerability by querying an exposed application programming interface API endpoint and decrypting data encrypted with a hard-coded key. This allows the attacker to retrieve sensiti...

Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass

Cisco Identity Services Engine contains an authentication bypass caused by insufficient authentication control on an API endpoint, letting unauthenticated remote attackers gain unauthorized access, exploit requires crafted request to API endpoint. id: CVE-2026-76460 info: name: Cisco Identity...

EUVD-2026-116595

A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been...

CVE-2026-121582

A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been...

CVE-2026-121582 Umami Record API Endpoint route.ts authorization

A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been...

CVE-2026-121582 Umami Record API Endpoint route.ts authorization

A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been...

CVE-2026-121582

A vulnerability exists in Umami up to version 3.4.1 within the Record API Endpoint component, specifically affecting an unknown function in the file src/app/api/record/route.ts. The root cause is an authorization bypass resulting from the manipulation of the Website argument. This vulnerability c...

CVE-2026-95771

An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system...

CVE-2026-95746

An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an...

CVE-2026-95771 Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint

An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system...

EUVD-2026-116188

An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system...