981379 matches found
IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133
IBM Security Verify Access - OAuth 流程中的开放重定向 CVE-2024-35133 目录 1. 概述 2. 详细描述 3. 概念验证 4. 解决方案 5. 披露时间线 6. 参考资料 7. 致谢 8. 法律声明 概述 版本 : 1.0 影响 : 远程攻击者可通过诱使受害者访问特制网站，利用此漏洞伪造显示 URL 并将用户重定向至恶意网站。这可能导致攻击者获取高度敏感信息或对受害者发起进一步攻击。 严重性 : NIST：高危 IBM：中危 CVSS 评分 : NIST：8.2...
privacytools.io
加密以对抗全球大规模监控。 贡献 此项目已归档。 有关更多信息，请参阅我们的 欢迎来到 Privacy Guides 文章。我们的项目现已迁移至 Privacy Guides。 对于隐私相关的网站来说，保持内容更新非常重要。请留意 此处 所列应用程序的软件更新，并关注推荐服务商的最新动态。我们尽力保持同步，但我们并非完美，互联网瞬息万变。因此，如果您发现错误，或认为某个服务商不应被收录，或缺少某个合格的服务提供商，或某个浏览器插件不再是首选，或任何其他问题，欢迎开启 讨论 或 问题 来纠正错误。 和我们聊聊吧！ 如果您想提供帮助，欢迎加入我们的休息室聊天室...
OVSwrap-CVE-2026-64531-Mitigation-Tool
Herramienta de Mitigación OVSwrap CVE-2026-64531 Un script sencillo que detecta y mitiga la vulnerabilidad OVSwrap que afecta a los módulos del kernel de Open vSwitch. Características Detecta módulos vulnerables de Open vSwitch Determina si el módulo está cargado Bloquea la carga automática Elimi...
CVE-2026-90769
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
CVE-2022-24637
Aplicación vulnerable Open Web Analytics OWA anterior a 1.7.4 permite que un atacante remoto no autenticado obtenga información confidencial del usuario, que puede usarse para obtener privilegios de administrador aprovechando los hashes de caché. Esto ocurre porque los archivos generados con y...
CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
EUVD-2026-76990
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
CVE-2026-90769
Open Notebook before 1.11.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the POST /api/sources endpoint. The application fails to validate the URL parameter, allowing any authenticated user to supply arbitrary URLs that the server will fetch directly. This enables attackers to r...
CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...
LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability
漏洞标题：LetterPress CLICK THIS"，然后点击“Save Campaign”（保存营销活动）。 2. 查看该营销活动，点击“CLICK THIS”超链接，它将重定向到第三方站点。（例如：evil.com）...
Cybersecurity-Handbook
📚 Cybersecurity Handbook A modern, open-source cybersecurity knowledge base designed to help students, professionals, and lifelong learners build practical security skills through structured notes, hands-on labs, and real-world concepts. Built with Quartz • Powered by Markdown • Community Driven ...
cacti
Cacti Overview Cacti is an open-source network monitoring and graphing platform built on RRDtool. It provides a scalable framework to collect, store, and visualize time-series data from network devices, servers, and applications. Core capabilities include: Automated device discovery Local and...
CVE-2026-80072
The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing...
CVE-2026-80072 User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters
The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing...
CVE-2026-80072
The User Registration & Membership WordPress plugin before 5.2.8 fails to validate the destination of a post-login redirect, enabling unauthenticated attackers to send visitors to an arbitrary external URL. This open redirect vulnerability can be leveraged for phishing , luring users to a malicio...
EUVD-2026-76953
The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing...
selenium-wire
Selenium Wire is no longer being maintained. Thank you for your support and all your contributions. Selenium Wire Selenium Wire extends Selenium's Python bindings to give you access to the underlying requests made by the browser. You author your code in the same way as you do with Selenium, but y...
gf
gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...
CVE-2022-24637
CVE-2022-24637 Exploit para el RCE no autenticado en Open Web Analytics OWA 1.7.3. Este trabajo se basa en https://devel0pment.de/?p=2494. AVISO LEGAL: Este script está diseñado para auditar la seguridad de los sistemas. Utilice este script únicamente en sus propios sistemas o en sistemas en los...