CVE-2023-30212-Lab

CVE-2023-30212-Lab GitHub-Repository mit Dockerfile und Dateien, um eine angreifbare Umgebung für CVE-2023-30212 zu erstellen, die die Untersuchung der Ausnutzbarkeit dieser Sicherheitslücke ermöglicht. Ideal für Forschung und Sicherheitsbegeisterte, um die Auswirkungen der Schwachstelle in einer...

CVE-2023-2822-demo

CVE-2023-2822-demo Einfache Flask-Anwendung zur Implementierung einer absichtlich verwundbaren Web-App zur Vorführung von CVE-2023-2822. Basiert auf dem Writeup unter...

EyouCMS 1.5.4 Open Redirect

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. id: CVE-2021-39501 info: name: EyouCMS 1.5.4 Open Redirect author: 0xAkoko severity: medium description: EyouCMS 1.5.4 is vulnerable to an Open Redirect...

Microweber < 1.2.11 - Open Redirection

Open Redirect in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0597 info: name: Microweber 1.2.11 - Open Redirection author: Farish severity: medium description: | Open Redirect in Packagist microweber/microweber prior to 1.2.11. impact: | Attackers can redirect users to malicious...

User Registration & Membership WordPress plugin - Open Redirect

User Registration & Membership WordPress plugin = 5.1.4 contains an open redirect caused by insufficient validation of 'redirecttoonlogout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL. id: CVE-2026-6203 info: name: User...

UC Gateway Investment SiteEngine v5.0 - Open Redirect

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action. id: CVE-2008-7269 info: name: UC Gateway Investment SiteEngine v5.0 - Open...

CVE-2019-13497

CVE-2019-13497 익스플로잇 제목: 사이트 간 요청 위조 CSRF 날짜: 07/10/2019 익스플로잇 작성자: Furqan Khan 공급업체 홈페이지: https://www.oneidentity.com/ 소프트웨어 링크: https://www.oneidentity.com/products/cloud-access-manager/ 버전: 8.1.3 테스트 환경: Kali Linux , Windows 7 ,Ubantu 16.04 이 취약점을 악용하려면 공격자는 로그아웃 요청을 제출하는 HTML 양식을 만든 뒤 해당 링크를...

CVE-2025-12101-Scanner-PoC

CVE-2025-12101 扫描器 针对 CVE-2025-12101 的多线程漏洞扫描器 —— Citrix NetScaler 通过 SAML RelayState 的 XSS 漏洞。 概述 CVE-2025-12101 是 Citrix NetScaler ADC 和 Gateway 产品中的一个反射型 XSS 漏洞，影响 /cgi/logout 端点，通过 RelayState 参数触发。 CVSS 评分： 5.9（中等） 功能特性 ✅ 单主机 -u 或多主机 -f 扫描 ✅ 多线程扫描（1-100 线程） ✅ 唯一载荷验证（零误报） ✅ 双协议测试（HTTP + HTTPS）...

CVE-2025-56643

CVE-2025-56643 Referência pública para CVE-2025-56643 – Vulnerabilidade de Sessão JWT do Wiki.js 2.5.307 Descrição: O Requarks Wiki.js 2.5.307 não revoga ou invalida corretamente tokens JWT ativos quando um utilizador termina a sessão. Como resultado, tokens emitidos anteriormente permanecem...

CVE-2026-80428

ILIAS (e-learning platform) is vulnerable to unauthenticated PHP object injection via its Shibboleth back-channel endpoint (shib_logout.php). The endpoint's logout-notification handler deserialises all live session rows without restricting constructable classes, and runs in a context exempt from ...

CVE-2025-12101-checker

CVE-2025-12101-checker सिट्रिक्स NetScaler ADC / Gateway इंस्टेंसेस को CVE-2025-12101 /cgi/logout पर परावर्तित XSS के लिए एक तैयार SAMLResponse + RelayState पेलोड का उपयोग करके जाँचने के लिए सरल Python PoC। ⚠️ इस उपकरण का उपयोग केवल उन सिस्टमों पर करें जिनके आप मालिक हैं या जिनके परीक्षण के लिए...

CVE-2026-9033 Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways

An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access. Successful...

CVE-2026-40509

OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The webpath GET parameter in the DICOM viewer page is embedded unsanitized as a URL without validation against expected path formats. An attacker can craft a URL that causes an authenticated user with...

CVE-2026-40509

OpenEMR before 8.3.0 is affected by a cross-site request forgery (CSRF) vulnerability in the DICOM viewer . The web_path GET parameter is embedded unsanitized as a URL without validation against expected path formats. An attacker can craft a malicious URL that causes an authenticated user holding...

EUVD-2026-62510

OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The webpath GET parameter in the DICOM viewer page is embedded unsanitized as a URL without validation against expected path formats. An attacker can craft a URL that causes an authenticated user with...

CVE-2026-40509 OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter

OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The webpath GET parameter in the DICOM viewer page is embedded unsanitized as a URL without validation against expected path formats. An attacker can craft a URL that causes an authenticated user with...

CVE-2026-73671

Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlist, scheme validation, or relative path...

CVE-2026-73671

Saurus CMS Community Edition is affected by an unauthenticated open redirect in the logout handling code (classes/port.inc.php). The vulnerability occurs because the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlisting, scheme validation, or...

CVE-2026-73671 Saurus CMS Unauthenticated Open Redirect via logout url parameter

Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlist, scheme validation, or relative path...

CVE-2026-73671

Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlist, scheme validation, or relative path...