CVE-2025-56643

CVE-2025-56643 Référence publique pour CVE-2025-56643 – Wiki.js 2.5.307 Vulnérabilité de session JWT Description : Requarks Wiki.js 2.5.307 ne révoque pas correctement ou n'invalide pas les jetons JWT actifs lorsqu'un utilisateur se déconnecte. En conséquence, les jetons précédemment émis restent...

CVE-2023-2822-demo

CVE-2023-2822-demo Простое flask-приложение, реализующее намеренно уязвимое веб-приложение для демонстрации CVE-2023-2822. Основано на статье: https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb. docker build -t...

CVE-2019-13497

CVE-2019-13497 Exploit Title: Cross Site Request Forgery CSRF Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali Linux , Windows 7 ,Ubantu 16.04 Pour...

EyouCMS 1.5.4 Open Redirect

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. id: CVE-2021-39501 info: name: EyouCMS 1.5.4 Open Redirect author: 0xAkoko severity: medium description: EyouCMS 1.5.4 is vulnerable to an Open Redirect...

UC Gateway Investment SiteEngine v5.0 - Open Redirect

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action. id: CVE-2008-7269 info: name: UC Gateway Investment SiteEngine v5.0 - Open...

Microweber < 1.2.11 - Open Redirection

Open Redirect in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0597 info: name: Microweber 1.2.11 - Open Redirection author: Farish severity: medium description: | Open Redirect in Packagist microweber/microweber prior to 1.2.11. impact: | Attackers can redirect users to malicious...

User Registration & Membership WordPress plugin - Open Redirect

User Registration & Membership WordPress plugin = 5.1.4 contains an open redirect caused by insufficient validation of 'redirecttoonlogout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL. id: CVE-2026-6203 info: name: User...

CVE-2025-12101-Scanner-PoC

Scanner CVE-2025-12101 Scanner de vulnérabilité multi-threadé pour CVE-2025-12101 - XSS Citrix NetScaler via SAML RelayState. Aperçu CVE-2025-12101 est une vulnérabilité XSS reflétée dans les produits Citrix NetScaler ADC et Gateway affectant le point de terminaison /cgi/logout via le paramètre...

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

SummaryThe OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it without a browser session. Before checking whether the submitted logout token was genuine, the handler fetched the provider's discovery document and its signing keys over the network,...

Rocky Linux 8 [CIQ] Security Update: mod_auth_mellon / mod_auth_mellon-debuginfo / etc (crlsa-2022_1934)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20221934 advisory. modauthmellon: Open Redirect vulnerability in logout URLs CVE-2021-3639 Tenable has extracted the preceding description block directly from the CIQ security advisor...

Rocky Linux 8 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel Multiple Vulnerabilities (crlsa-2020_3032)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20203032 advisory. modauthopenidc: Open redirect in logout url when using URLs with leading slashes CVE-2019-14857 modauthopenidc: Open redirect issue exists in URLs with sla...

CVE-2023-30212-Lab

CVE-2023-30212-Lab Dépôt GitHub contenant un Dockerfile et des fichiers pour créer un environnement vulnérable pour CVE-2023-30212, permettant d'explorer l'exploitabilité de cette vulnérabilité de sécurité. Idéal pour les chercheurs et les passionnés de sécurité afin d'étudier et de comprendre...

CVE-2025-12101-checker

CVE-2025-12101-checker Simple PoC Python pour vérifier les instances Citrix NetScaler ADC / Gateway pour CVE-2025-12101 XSS réfléchi sur /cgi/logout à l’aide d’une charge utile SAMLResponse + RelayState forgée. ⚠️ Utilisez cet outil uniquement sur les systèmes que vous possédez ou pour lesquels...

CVE-2026-71981

Cypht CVE-2026-71981 PoC Это PoC для CVE-2026-71981 — небезопасная десериализация, приводящая к удалённому выполнению кода RCE. Результат выполненной команды выводится в ответе на запрос выхода logout после тегов . Используйте --print-all, чтобы также вывести весь ответ целиком. Уязвимые версии:...

CVE-2026-88805 Session Not Revoked Server-Side on Logout in Rancher

Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected is SUSE Rancher 2.15 before 2.15.2...

BIT-AIRFLOW-2026-86473 Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry

Apache Airflow: the Core API logout endpoint revokes only a session token presented as the token cookie. When a client logs out presenting its credential as an Authorization bearer header instead, the endpoint returns its normal logout response but revokes nothing, so the token remains valid unti...

CVE-2026-63006

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-controlled HTML in inbound emails or tickets could bypass the image URL sanitizer using path traversal sequences. When an authenticated agent views the content, the browser resolves the URL to a protected...

CVE-2026-63006

Prior to version 7.1.2 , the Zammad helpdesk system is vulnerable to a security bypass where attacker-controlled HTML in inbound emails or tickets can circumvent the image URL sanitizer . By using path traversal sequences , an attacker can cause the browser to resolve a URL to a protected API end...

CVE-2026-63006 Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-controlled HTML in inbound emails or tickets could bypass the image URL sanitizer using path traversal sequences. When an authenticated agent views the content, the browser resolves the URL to a protected...

CVE-2026-63006 Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-controlled HTML in inbound emails or tickets could bypass the image URL sanitizer using path traversal sequences. When an authenticated agent views the content, the browser resolves the URL to a protected...