585 matches found
CVE-2026-61638 Wallos: SSRF via Test Email Notification - unvalidated SMTP host/port
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/notifications/testemailnotifications.php accepts smtpaddress and smtpport from POST body with zero SSRF validation. PHPMailer connects to attacker-supplied host:port. Every other...
EUVD-2026-68804
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/notifications/testemailnotifications.php accepts smtpaddress and smtpport from POST body with zero SSRF validation. PHPMailer connects to attacker-supplied host:port. Every other...
PT-2026-84038
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos lets any authenticated user store an arbitrary SMTP host — including private and cloud-metadata IP addresses — in their personal email notification settings, with no server-side SSRF validation...
PT-2026-83991
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/notifications/testemailnotifications.php accepts smtpaddress and smtpport from POST body with zero SSRF validation. PHPMailer connects to attacker-supplied host:port. Every other...
Exploit for Argument Injection in Phpmailer_Project Phpmailer
No d...
Exploit for Argument Injection in Phpmailer_Project Phpmailer
MediCare Portal Intentionally vulnerable healthcare patient...
cscart-rce-lfi-exploit
cscart-rce-lfi-exploit CS-Cart Authe...
CS-Cart-POC
CS-Cart RCE & LFI Exploit Developed by: Strikoder Tes...
EUVD-2017-16953
Malware in sbrugna...
EUVD-2021-1129
Malware in sbrugna...
EUVD-2020-0330
Malware in sbrugna...
EUVD-2020-0329
Malware in sbrugna...
EUVD-2020-0337
Malware in sbrugna...
EUVD-2020-0340
Malware in sbrugna...
EUVD-2021-1283
Malware in sbrugna...
EUVD-2010-4878
Malware in sbrugna...
EUVD-2020-0422
Malware in sbrugna...
EUVD-2021-1277
Malware in sbrugna...