992043 matches found
WordPress All-in-One Security <=4.4.1 - Open Redirect Detection
WordPress All-in-One Security plugin through 4.4.1 contains an open redirect vulnerability which can expose the actual URL of the hidden login page feature. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized...
Keystone 6 Login Page - Open Redirect and Cross-Site Scripting Detection
On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalated to reflected XSS. !/usr/bin/env python3 -- coding: utf-8 -- """On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalat.""" from...
Apache Tomcat - Open Redirect Detection
Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Tomcat versions prior to 9.""" import re from kittysploit import from...
LabKey Server Community Edition <18.3.0 - Open Redirect Detection
LabKey Server Community Edition before 18.3.0-61806.763 contains an open redirect vulnerability via the /r1/ returnURL parameter, which allows an attacker to redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations...
XWiki - Open Redirect Detection
XWiki Platform is vulnerable to open redirect attacks due to improper validation of the xredirect parameter. This allows an attacker to redirect users to an arbitrary website. The vulnerability is patched in versions 14.10.4 and 15.0. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform is...
Open Journal Systems pkp-lib - Open Redirect Detection
Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the setLocale function. !/usr/bin/env python3 -- coding: utf-8 -- """Public Knowledge Project pkp-lib is vulnerable to Open redirect due to a lack of input sanitization in the set.""" import re...
Open Journal Systems Detect
Open Journal Systems, also known as OJS, is a free software for the management of peer-reviewed academic journals, created by the Public Knowledge Project. !/usr/bin/env python3 -- coding: utf-8 -- """Open Journal Systems, also known as OJS, is a free software for the management of peer-reviewed...
Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion Detection
Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Server Open Source Editi...
Smartstore <4.1.0 - Open Redirect Detection
Smartstore aka "SmartStoreNET" before 4.1.0 contains an open redirect vulnerability via CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data,...
BlogEngine CMS - Open Redirect Detection
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect !/usr/bin/env python3 -- coding: utf-8 -- """Blogengine.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'BlogEngine CMS - Open Redirect...
Open edX <2022-06-06 - Cross-Site Scripting Detection
Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in the logout URL. !/usr/bin/env python3 -- coding: utf-8 -- """Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in.""" from...
Apache Struts - Multiple Open Redirection Vulnerabilities Detection
Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly ."...
SUSE-SU-2026:22959-1 Security update for python313, python3
This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error...
CVE-2026-53668
A flaw was found in React Router. Applications using React Router that allow open redirects are vulnerable to Cross-Site Scripting XSS. A remote attacker could craft a malicious link that, when clicked by a user, redirects them to an unexpected external site or exploits an XSS vulnerability,...
EUVD-2026-49727
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...
LuLu v4.4.3
LuLu 简体中文 | 正體中文 LuLu is the free open-source macOS firewall: Documentation: Full details and usage instructions can be found here. To Support: ❤ Love this product and want to support it? Please check out my patreon page. Read more...
Exploit for Incorrect Authorization in F5 Nginx_Plus
🛡️ NGINX 2026 Multi-CVE CTI Investigation CVE-2026-28755...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.26 security and extras update
Red Hat OpenShift Container Platform release 4.21.26 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...
CVE-2026-53669
A flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the or useNavigate components. This could lead to an Open Redirect, allowing the attacker to redirect users to...
