GHSA-53JC-27PC-X8R8 Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter

Impact The route POST /account/request/itemType/itemId/cancelbyadmin?/requestingUser? accepts cancelbyadmin as a plain URL path segment with no authorization check. Any authenticated user regardless of permissions can set this parameter to a truthy value and supply a victim's user ID to silently...

EUVD-2026-42989

Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancelbyadmin Parameter...

Snipe-IT vulnerable to directory traversal in displaySig

Impact The displaySig action in ActionlogController serves signature image files from a private upload directory. The filename parameter from the HTTP route is concatenated directly into a filesystem path with no sanitization, allowing an authenticated attacker to traverse outside the intended...

GHSA-C6F4-WJ38-M3G3 Snipe-IT vulnerable to directory traversal in displaySig

Impact The displaySig action in ActionlogController serves signature image files from a private upload directory. The filename parameter from the HTTP route is concatenated directly into a filesystem path with no sanitization, allowing an authenticated attacker to traverse outside the intended...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — Beliebiger Dateizugriff über streamhandler in ml-logger Dieses Repository stellt ein eigenständiges Python-Skript bereit — CVE-2025-10952.py — das eine nicht authentifizierte Schwachstelle für beliebigen Dateizugriff in ml-logger's streamhandler ausnutzt, verkettet mit dem...

ghidrecomp

Ghidrecomp - Decompilatore Ghidra da riga di comando Informazioni Questo strumento Python da riga di comando decompila tutte le funzioni di un binario e le scrive in una directory in file C separati:mermaid flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b --...

EUVD-2026-67849

Improper neutralization of parameter/argument delimiters in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66323

Microsoft Edge (Chromium-based) is affected by an improper neutralization of parameter/argument delimiters vulnerability that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 5.4 (Medium) , reflecting a network attack vector with low complexi...

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

CVE-2026-11101 – Avvelenamento della cache HTTP tramite parametro di query non incluso nella chiave Panoramica Una cache web utilizza solo il percorso dell'URL come chiave della cache, ignorando i parametri di query. Un attaccante può aggiungere un payload dannoso a un parametro non incluso nella...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the templateArgs parameter in the createInstance process. An attacker can execute arbitrary commands on the host system by injecting malicious YAML content that...

EUVD-2026-67841

Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirecturi parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.ja...

CVE-2026-55549 Yamcs: Reflected XSS in the URL of the Authorize Endpoint

Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirecturi parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.ja...

CVE-2026-55549 Yamcs: Reflected XSS in the URL of the Authorize Endpoint

Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirecturi parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.ja...

CVE-2026-55549 Yamcs: Reflected XSS in the URL of the Authorize Endpoint

Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirecturi parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.ja...

CVE-2026-55549

Yamcs , an open-source mission control framework, is vulnerable to reflected cross-site scripting (XSS) in the redirect_uri parameter of the GET /auth/authorize endpoint. The parameter is reflected into authorize.html without adequate HTML escaping by AuthHandler.java and HandlerContext.java , al...

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting Eine gespeicherte Cross-Site-Scripting-Schwachstelle XSS in Nagios Log Server 2.1.7 kann dazu führen, dass ein Angreifer bösartige Aktionen gegenüber Benutzern ausführt, die einen manipulierten Link oder eine Webseite eines Drittanbieters...

flash-xdomain-xploit

Autor: Gursev Singh Kalra [email protected] Umgehung der Same-Origin-Policy mit Flash und unsicherer crossdomain.xml Kompilieren und Bereitstellen des Proof-of-Concept-ActionScript-Codes 1. Laden Sie das Apache Flex SDK herunter und installieren Sie es. Es enthält einen ActionScript-Compiler...

CVE-2024-53677

Dieser Beitrag ist ein Forschungsartikel, veröffentlicht von EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unbeschränkter Upload von Dateien mit gefährlichem Typ und RCE PoC ★ Lab-Einrichtung root@kitploit: cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p...

SUSE CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

SUSE CVE-2026-74287

In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctpverifyasconf and sctpverifyparam only validate ADDIP, DELIP, and SETPRIMARY parameters against a fixed minimum size of sizeofstruct sctpaddipparam + sizeofstruct sctpparamhdr...