extended-xss-search

Extended XSS Searcher and Finder This is the extended version based on the initial idea already published as "xssfinder". This private version allows an attacker to perform not only GET but also POST requests. Additionally its possible to proxy every request through Burp or another tunnel. First...

CVE-2026-118411

A Cross-Site Request Forgery (CSRF) vulnerability exists in Apache Roller versions 5.0.1 through 6.1.6 . The root cause is that the application's request-token check is only applied to POST requests, while administrative actions also accept GET requests. This allows an unauthenticated attacker to...

MalleableC2Profiles

MalleableC2Profiles Malleable C2 profiles for Cobalt Strike version 3.6+ bingsearchgetonly.profile - Bing web search profile, uses GET requests only cnnvideogetonly.profile - MSNBC live video straming profile, uses GET requests only googledrivegetonly.profile - Google Drive document viewer...

SQLi_Sleeps

SQLiSleeps It is a simple script that allows to find SQLi vulnerabilities, obtaining the response time greater than 20 seconds per medium and time-based injection. usage: SQLiSleeps2.py -h -u URLS -d DATA -c COOKIE Realiza una petición GET a múltiples URLs con diferentes datos. options: -h, --hel...

PyFlooder

PyFlooder An HTTP Flood Python script that could stop a normal website in 10s How does it work ? It generates a configurable number of random GET requests and sends them to the target Usage pyflooder.py...

CVE-2026-125369 Bitpoll through 0.11.0 Unauthenticated Vote and Comment Disclosure via Unscoped Lookups

Bitpoll through 0.11.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read votes and comments from other polls via unscoped object lookups in views.py. Attackers can pair any public poll slug with sequential vote or comment IDs in vote,...

CVE-2026-125369 Bitpoll through 0.11.0 Unauthenticated Vote and Comment Disclosure via Unscoped Lookups

Bitpoll through 0.11.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read votes and comments from other polls via unscoped object lookups in views.py. Attackers can pair any public poll slug with sequential vote or comment IDs in vote,...

CVE-2026-8860

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs...

CVE-2026-84229

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests...

CVE-2026-8860 IBM Verify Directory is affected by multiple vulnerabilities

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs...

CVE-2026-8860

The IBM Security Verify Directory Web Application is vulnerable to credential exposure because it accepts GET requests for authentication. This allows credentials to be transmitted as URL parameters , which may be captured in browser history and server logs. The affected products are IBM Security...

EUVD-2026-119737

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs...

CVE-2026-84229

IBM Guardium Data Protection version 12.2.4 is vulnerable to a security restriction bypass due to improper validation of CSRF tokens for GET requests (CWE-352 ). A remote attacker can exploit this flaw to impact the integrity of the system. To remediate this vulnerability, IBM encourages customer...

EUVD-2026-119732

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests...

CVE-2026-123515

Vikunja before 2.7.1 contains a client-side request forgery vulnerability that allows users with write access to make viewers' clients request loopback or LAN addresses by storing img elements in rich text. Attackers can plant images in tasks, comments, project descriptions, or imported Markdown ...

CVE-2026-123515 Vikunja before 2.7.1 Client-Side Request Forgery via Stored Rich-Text Images

Vikunja before 2.7.1 contains a client-side request forgery vulnerability that allows users with write access to make viewers' clients request loopback or LAN addresses by storing img elements in rich text. Attackers can plant images in tasks, comments, project descriptions, or imported Markdown ...

CVE-2026-123515

Vikunja versions before 2.7.1 are vulnerable to a client-side request forgery vulnerability. This issue stems from the application's handling of stored rich-text images , where users with write access can plant img elements in tasks, comments, project descriptions, or imported Markdown. These ele...

EUVD-2026-119400

Vikunja before 2.7.1 contains a client-side request forgery vulnerability that allows users with write access to make viewers' clients request loopback or LAN addresses by storing img elements in rich text. Attackers can plant images in tasks, comments, project descriptions, or imported Markdown ...

CVE-2026-123515: go-vikunja vikunja: Vikunja before 2.7.1 contains a client-side request forgery vulnerability that allows users with write access to make…

Vikunja before 2.7.1 contains a client-side request forgery vulnerability that allows users with write access to make viewers' clients request loopback or LAN addresses by storing img elements in rich text. Attackers can plant images in tasks, comments, project descriptions, or imported Markdown ...

PT-2026-140146

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs...