CVE-2026-105238

The ChatGPTNextWeb NextChat software, version up to 2.16.1 , is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists within the proxyHandler function located in app/api/proxy.ts of the Proxy Fallback Handler component. Specifically, an attacker can manipulate the x-base-url argume...

CVE-2026-105238 ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...

CVE-2026-105238 ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the...

CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin, affecting versions through 1.4.3 , contains a vulnerability where it fails to verify if a payment-confirmation request belongs to the specific order and customer it claims to confirm. This lack of authorization allows unauthenticated attackers to ...

CVE-2026-84169 UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

WordPress UPI QR Code Payment Gateway plugin <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery vulnerability

Unauthenticated Cross-Order Payment-Status Forgery vulnerability discovered by Pedro Pinho in WordPress Plugin UPI QR Code Payment Gateway versions = 1.4.3...

CVE-2026-82329-JFrog-Artifactory-

CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — Bypass de Autenticación en JFrog Artifactory La Vulnerabilidad Bypass de autenticación crítico en JFrog Artifactory versiones 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. La falla permite a un atacante no autenticado falsificar un...

CVE-2021-46080

CVE-2021-46080 Título del exploit: Vehicle Service Management System - 'Múltiple' Cross-Site Request Forgery CSRF conduce a Cross Site Scripting Almacenado XSS Autor del exploit: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM Referencias:...

CVE-2026-44578

🚨 CVE-2026-44578 — Next.js SSRF 漏洞 📌 概述 CVE-2026-44578 是一个影响自托管 Next.js 应用的高严重性 服务端请求伪造 SSRF 漏洞。 攻击者可以利用精心构造的 WebSocket 升级请求 ，强制服务器向内部或外部系统发起出站请求。 ⚠️ 影响 此漏洞可能允许攻击者访问： 目标| 风险 ---|--- 🔐 内部 API| 未授权的内部访问 ☁️ 云元数据端点| 凭证泄露 🖥 管理接口| 权限提升 🌐 网络资源| 内部侦察 🧠 攻击流程 Attacker │ ▼ Crafted WebSocket Upgrade Request │...

CVE-2026-62062

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-62062 CVE-2026-62062 Elementor Website Builder 4.3.1 - Elementor I am @abraxasnull. Loopback lab. The client is CVE-2026-62062-Abraxas-Labs.py. CSRF via a substring. Elementor 4.3.0-4.3.1 skips WordPress REST...

CVE-2026-53519-PoC

CVE-2026-53519 — Nezha Dashboard 路徑遍歷與 JWT 偽造 本儲存庫包含一個針對 Nezha Dashboard 漏洞的概念驗證（PoC）程式，該漏洞允許未經驗證的路徑遍歷（Path Traversal） ，導致敏感檔案（包括 jwtsecretkey）洩露，並進一步實現JWT Token 偽造以取得管理員存取權限 。 此問題已於 GitHub Security Advisory 正式追蹤： https://github.com/nezhahq/nezha/security/advisories/GHSA-5c25-7vpj-9mqh 如公告所述，該漏洞源...

CVE-2026-29000

Laboratorio CVE-2026-29000 Laboratorio Java/SparkJava que simula el error de autenticación JWT/JWE relacionado con CVE-2026-29000. La aplicación se ejecuta en el puerto 4567 y proporciona APIs para probar flujos de inicio de sesión válidos, generar tokens falsificados y verificar el panel de...

CVE-2024-10605

Versión afectada: BloodBank Management System : 1.0 Información de la vulnerabilidad: Tipo de vulnerabilidad: Cross Site Request Forgery CSRF Severidad: ALTA Estado: Sin parche Endpoint vulnerable: Ruta: file/request.php Descripción de la vulnerabilidad: Existe una Cross Site Request Forgery en...

Debian dla-4823 : roundcube - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4823 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4823-1 [email protected]...

CVE-2026-61500

CVE-2026-61500: Falsificación de sesión en Rejetto HFS hasta RCE CVE-2026-61500 es una vulnerabilidad de falsificación de sesión no autenticada en Rejetto HFS 3.0.0 hasta 3.2.0. HFS generaba su clave de firma de cookies de sesión de Koa con JavaScript Math.random y exponía salidas del mismo PRNG ...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Informe de referencia: GHSA-pgpj-v85q-h5fm Este repositorio contiene una configuración de docker compose que configura tanto un servidor pyLoad como un servidor atacante que solo proporciona un csrf.html. Para probarlo usted mismo, simplemente ejecute docker composer up necesita...

CVE-2025-68860

CVE-2025-68860 El plugin Mobile builder de WordPress La vulnerabilidad de Omisión de autenticación mediante una ruta o canal alternativo en Mobile Builder permite el abuso de autenticación. Este problema afecta a Mobile builder desde n/a hasta 1.4.2. Puntuación CVSS: 9.8 CRÍTICA Vector:...

CVE-2020-23588

CVE-2020-23588 OPTILINK E-PON "N.º DE MODELO: OP-XT71000N" con "VERSIÓN DE HARDWARE: V2.2"; y "VERSIÓN DE FIRMWARE: OPV3.3.1-191028" La vulnerabilidad encontrada en el "OPTILINK OP-XT71000N Versión de Hardware: V2.2, Versión de Firmware: OPV3.3.1-191028" permite que un atacante remoto no...

CVE-2023-27163---SSRF-Baskets-Requests

CVE-2023-27163---SSRF-Baskets-Requests Creado por TheAlchimist cve-2023-27163-ssrfbaskets.py ejemplo : cve-2023-27163-ssrfbaskets.py http://mysite.com http://localhost...

CVE-2025-65945-poc

CVE-2025-65945: node-jws 签名绕过 这是 node-jws 库中签名验证绕过漏洞的概念验证。该漏洞允许攻击者在服务器从用户可控数据派生 HMAC 密钥时伪造有效的 JWT。 漏洞原理是什么？ jws.createVerify 函数在使用 HMAC 算法时，不会验证是否确实提供了密钥。如果你的应用程序根据 JWT 中的某些内容（如 kid 头）查找密钥，并且查找失败，那么你最终可能会使用空密钥进行验证。 攻击者可以利用这一点： 1. 发送一个包含不存在于数据库中的虚假密钥 ID 的 JWT 2. 使用空字符串作为密钥签署其恶意负载 3. 服务器的查找返回...