Dropbear_CVE-2013-4434

DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh Ce script vérifie CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434. Le serveur SSH Dropbear antérieur à 2013.59 génère des messages d'erreur pour une tentative de connexion échouée avec des délais différents selon que le compte utilisateur existe ...

cve-2018-15473

CVE-2018-15473 OpenSSH 7.7까지의 버전은 잘못된 인증 사용자에 대한 탈출bailout을 요청이 포함된 패킷이 완전히 파싱된 후까지 지연시키지 않아 사용자 열거 취약점이 존재합니다. 이는 auth2-gss.c, auth2-hostbased.c, auth2-pubkey.c와 관련됩니다. 설치 배포판에 맞는 openssl-dev 패키지를 설치해야 할 수 있습니다. root@kitploit: NOTE: if you're installing on kali, you can skip the pip install;...

CVE-2020-15392

CVE-2020-15392 Enumerazione utenti su Supravizio BPM 10.1.2 Descrizione È stata riscontrata una vulnerabilità di enumerazione degli utenti in Supravizio BPM, versione 10.1.2. Il problema si verifica durante il recupero della password, dove una differenza nei messaggi potrebbe consentire a un...

CVE-2024-29296

CVE-2024-29296 - Enumerazione degli utenti su Portainer CE - 2.19.4 È stata trovata una vulnerabilità di enumerazione degli utenti in Portainer CE 2.19.4. Il problema si verifica durante il processo di autenticazione dell'utente, dove una differenza nei tempi di risposta potrebbe consentire a un...

CVE-2025-8471

CVE-2025-8471 SQL Injection PoC Autor : Byte Reaper CVE : CVE-2025-8471 Schwachstelle : SQL Injection in „projectworlds Online Admission System v1.0“ Beschreibung : In adminlogin.php?aid= existiert eine blinde SQL-Injection. Dieser PoC sendet eine Reihe von GET-Anfragen mit verschiedenen Payloads...

EUVD-2026-53367

ChirpStack's SQLite-backend device tag filtering chirpstack/src/storage/device.rs, in both getcount and list interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust's format! macro dsl::sql::&format!"device.tags-'' =", k.bind::v, while only the tag VALUE is safely...

GHSA-MWP4-54F8-5FHR ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

Summary Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inetaton, and getaddrinfo all decode a leading zero as octal. The library and the network stack therefore disagree about which host a string names. new Address4'012.0.0.1'...

fast-uri vulnerable to host confusion via backslash authority introducer

Impact fast-uri v4.1.1 and earlier require a literal // to recognize a URI authority, so a reference that uses \, /, or / as the authority introducer in place of //, after an optional scheme is parsed with no authority: the sequence and everything after it fold into the path. Node's native...

GHSA-7P8R-X3MC-P8W7 fast-uri vulnerable to host confusion via backslash authority introducer

Impact fast-uri v4.1.1 and earlier require a literal // to recognize a URI authority, so a reference that uses \, /, or / as the authority introducer in place of //, after an optional scheme is parsed with no authority: the sequence and everything after it fold into the path. Node's native...

SUSE CVE-2026-67201

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery SSRF bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urllib and net.http. Attackers can craft a URL containing a backslash in the authori...

CVE-2026-67201

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery SSRF bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urllib and net.http. Attackers can craft a URL containing a backslash in the authori...

Arbitrary Argument Injection

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Arbitrary Argument Injection via the diff process. An attacker can overwrite or corrupt arbitrary files with attacker-influenced diff content by injecting malicious...

PYSEC-2026-2950 PraisonAI has an SSRF bypass

Summary The URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. Details The current PraisonAI project uses validateurl to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by...

PYSEC-2026-2001 uv allows ZIP payload obfuscation through parsing differentials

Impact In versions 0.8.5 and earlier of uv, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. This enabled two parser differentials against other Python package installers: 1. An attacker could contrive a ZIP...

EUVD-2026-25038

cut: -s ignored in -z -d '' newline-delimiter mode...

CVE-2026-13706 UrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWG

Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program files includes/UrlShortenerUtils.Php...

CVE-2026-50168

CVE-2026-50168 affects Angular's @angular/platform-server and enables SSRF via a parser differential between the strict WHATWG URL parser (used for allowlists) and Domino’s lenient parser (used for server emulation). A malformed URL with a double-port structure (e.g., http://evil.com:80:80/path) ...

CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

GHSA-VMF3-W455-68VH node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

Summary tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extended header x describes the next file entry, not the...

CVE-2026-44927

A flaw was found in uriparser. This vulnerability involves pointer difference truncation, where calculations involving memory addresses are incorrectly shortened. This could lead to minor data integrity issues within the application. Exploitation of this flaw requires local access to the system a...