cansina

Cansina Cansina est une application de découverte de contenu Web. Il est bien connu que les applications Web ne publient pas toutes leurs ressources ou leurs liens publics, donc la seule façon de découvrir ces ressources est de les demander et de vérifier la réponse. Le devoir de Cansina est de...

CVE-2026-94543

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the...

CVE-2026-94484

Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the...

CVE-2026-104906

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

CVE-2026-104906

The MISP platform contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer (versions

CVE-2026-104906 MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

EUVD-2026-91742

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

CVE-2023-34845

CVE-2023-34845 POC de vulnérabilité pour CVE-2023-34845 Vulnérabilité J'ai trouvé une attaque de cross-site scripting sur la page de création de nouveau contenu http://localhost:800/admin/new-content elle exécutera le script dans le contexte de l'utilisateur, permettant à l'attaquant d'accéder au...

CVE-2026-94484

The Next.js React framework is vulnerable to cache poisoning in versions 15.0.0 through 15.5.27 and 16.3.8 . The root cause is an insufficiently scoped shared response cache key used by applications with a root-level catch-all page and statically generated or Incremental Static Regeneration (ISR)...

CVE-2023-27163-POC

CVE-2023-27163 PoC de SSRF pour Request-Baskets CVE-2023-27163 basé sur ce code de entr0pie. Le PoC est étendu pour fuzzer le contenu d'un autre service web local ou autre et retourner le contenu des fichiers trouvés. Usage python3 CVE-2023-27163.py http://: -t http://: -w...

WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WDS MCP Content Manager versions = 3.10.4...

CVE-2026-104455

YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restricted page content via the recentchangesrssplus RSS action. Attackers can request the xml method of a page hosting the action to retrieve 500-character body excerpts of every...

CVE-2026-104444

YesWiki before 4.6.7 contains an authorization bypass vulnerability in the comments API editComment route that allows authenticated low-privilege users to overwrite arbitrary pages or comments by supplying their own page as the pagetag field. Attackers can send a POST request to the api/comments...

CVE-2026-104442

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104414

Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untrusted scripts into post content via oEmbed photo responses. Attackers can host malicious oEmbed photo responses so that embedding their URL stores scripts that run in the Ghost...

WSOB

😭 WSOB CVE-2022-29464 😭 WSOB — это инструмент на Python, созданный для эксплуатации новой уязвимости в WSO2, обозначенной как CVE-2022-29464. Детали CVE-2022-29464: Некоторые продукты WSO2 допускают неограниченную загрузку файлов с последующим удалённым выполнением кода. Атакующий должен...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

CVE-2026-104455 YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS Action

YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restricted page content via the recentchangesrssplus RSS action. Attackers can request the xml method of a page hosting the action to retrieve 500-character body excerpts of every...

CVE-2026-104455

YesWiki versions prior to 4.6.7 are vulnerable to an access control bypass via the recentchangesrssplus RSS action. Unauthenticated attackers can request the xml method of a page hosting this action to retrieve 500-character body excerpts of all latest pages. This includes access to read-restrict...

EUVD-2026-91466

YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restricted page content via the recentchangesrssplus RSS action. Attackers can request the xml method of a page hosting the action to retrieve 500-character body excerpts of every...