4354 matches found
CVE-2002-2094
Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct...
CVE-2002-1907
TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service crash via a long HTTP GET request...
CVE-1999-0744
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request...
CVE-2025-26086
An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get request handler. Attackers can remotely inject time-delayed SQL payloads to induce server response delays, enabling time-based inference and iterative extraction ...
CVE-2024-53359
An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request...
CVE-2024-53359
An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request...
Zalo 安全漏洞
Zalo is a multifunctional application from Zalo that runs on mobile and computer platforms. A security vulnerability exists in Zalo version v23.09.01, which stems from a specially crafted GET request that could lead to the disclosure of sensitive information...
CVE-2024-53359
An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request...
CVE-2024-53359
An issue in Zalo v23.09.01 allows an attacker to obtain sensitive user information by sending a specially crafted GET request . This vulnerability results in the exposure of sensitive information to an unauthorized actor. Currently, there is no information available regarding a newer version that...
CVE-2024-53359: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request...
CVE-2024-53359
An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request...
PT-2025-22136 · Zalo · Zalo
Name of the Vulnerable Software and Affected Versions: Zalo version 23.09.01 Description: The issue allows attackers to obtain sensitive user information via a crafted GET request. Recommendations: For Zalo version 23.09.01, at the moment, there is no information about a newer version that contai...
📄 DiskBoss Enterprise 7.4.28 Remtoe Buffer Overflow
DiskBoss Enterprise version 7.4.28 GET remote buffer overflow SEH exploit with egghunter shellcode. Exploit Title: DiskBoss Enterprise 7.4.28 - 'GET' Remote Buffer Overflow SEH - Egghunter Date: 2025-05-05 Exploit Author: Fernando Mengali Linkedin:...
CVE-2025-45611
Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...
The vulnerability of PARTS SOFT’s CMS, related to discrepancies in responses to incoming requests, allows a hacker to uncover the user’s identifier.
The vulnerability of the PARTS SOFT CMS content management system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability allows an attacker to disclose the user’s identifier by sending a specially crafted GET request...
CVE-2025-45612
Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index...
CVE-2025-45611
Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...
CVE-2025-45612
Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index...