991115 matches found
Flarum < 1.8.5 - Open Redirect Detection
Flarum is open source discussion platform software. Prior to version 1.8.5, the Flarum /logout route includes a redirect parameter that allows any third party to redirect users from a trusted domain of the Flarum installation to redirect to any link. For logged-in users, the logout must be...
nitely/spirit 0.12.3 - Open Redirect Detection
Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
Rudloff alltube prior to 3.0.1 - Open Redirect Detection
An open redirect vulnerability exists in Rudloff/alltube that could let an attacker construct a URL within the application that causes redirection to an arbitrary external domain via Packagist in versions prior to 3.0.1. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability...
Phoenix Framework - Open Redirect Detection
Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 contain an open redirect vulnerability, which may result in phishing or social engineering attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Phoenix Framework versions 1.""" import re from...
WordPress AcyMailing <7.5.0 - Open Redirect Detection
WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user. !/usr/bin/env python3...
Seagate NAS OS 4.3.15.1 - Open Redirect Detection
Seagate NAS OS 4.3.15.1 contains an open redirect vulnerability in echo-server.html, which can allow an attacker to disclose information in the referer header via the state URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate NAS OS 4.""" import re from kittysploit import from...
WordPress Weekender Newspaper 9.0 - Open Redirect Detection
WordPress Weekender Newspaper theme 9.0 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Weekender...
WordPress Ultimate Member <2.1.7 - Open Redirect Detection
WordPress Ultimate Member plugin before 2.1.7 contains an open redirect vulnerability on the registration and login pages via the "redirectto" GET parameter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized...
Apache Tomcat - Open Redirect Detection
Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Tomcat versions prior to 9.""" import re from kittysploit import from...
WordPress Pie Register <3.8.2.3 - Open Redirect Detection
WordPress Pie Register plugin before 3.8.2.3 contains an open redirect vulnerability. The plugin does not properly validate the redirection URL when logging in and login out. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute...
Sympa version =>6.2.16 - Cross-Site Scripting Detection
Sympa version 6.2.16 and later contains a URL Redirection to Untrusted Site vulnerability in the referer parameter of the wwsympa fcgi login action that can result in open redirection and reflected cross-site scripting via data URIs. !/usr/bin/env python3 -- coding: utf-8 -- """Sympa version 6.""...
Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect Detection
The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env...
Noptin < 1.6.5 - Open Redirect Detection
Noptin 1.6.5 is susceptible to an open redirect vulnerability. The plugin does not validate the "to" parameter before redirecting the user to its given value, leading to an open redirect issue. !/usr/bin/env python3 -- coding: utf-8 -- """Noptin 1.""" import re from kittysploit import from...
Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect Detection
The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...
Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect Detection
In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. !/usr/bin/env python3 -- coding: utf-8 -- """In Apache HTTP server 2.""" impo...
SUSE-SU-2026:22959-1 Security update for python313, python3
This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error...
CVE-2026-53668
A flaw was found in React Router. Applications using React Router that allow open redirects are vulnerable to Cross-Site Scripting XSS. A remote attacker could craft a malicious link that, when clicked by a user, redirects them to an unexpected external site or exploits an XSS vulnerability,...
EUVD-2026-49727
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...
LuLu v4.4.3
LuLu 简体中文 | 正體中文 LuLu is the free open-source macOS firewall: Documentation: Full details and usage instructions can be found here. To Support: ❤ Love this product and want to support it? Please check out my patreon page. Read more...
