ComfyUI-Manager < 3.39.2 - CRLF Configuration Injection

ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or...

Eclipse BIRT Viewer - Remote Code Execution

Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters. id: CVE-2021-34427 info: name: Eclipse BIRT Viewer - Remote Code...

Arjun

Arjun HTTP Parameter Discovery Suite What's Arjun? Arjun can find query parameters for URL endpoints. If you don't get what that means, it's okay, read along. Web applications use parameters or queries to accept user input, take the following example into consideration...

CVE-2022-24342

CVE-2022-24342 JetBrains TeamCity - account takeover via CSRF in GitHub authentication PoC CVE-2022-24342 Requirements Usage How does it work? GitHub OAuth2: query parameters processing order CVE-2022-24342: HTTP requests flow Requirements JetBrains TeamCity If you run the exploit on the local...

CVE-2025-49132

Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...

CVE-2025-49132

Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...

CVE-2019-7219

CVE-2019-7219 CVE-2019-7219 Zarafa Webapp Author: verifysecurity At least Webapp version 1.6-46049 till 2.0.1.47791 are affected. hxxps://127.0.0.1/webapp/?fccc0"5f43d=1...

CVE-2022-28346

CVE-2022-28346 PoC Impact: Potential SQL injection in QuerySet.annotate, aggregate, and extra. Installation poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC ?field=poc.title" FROM "pocblog" union SELECT...

CVE-2026-123776

RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset, , so a FIFO or device path blocks the CGI process. The normalizeparams method sends any query key matching /tz/i to tz, which sets $ENVTZ to that value, with no validation. It then calls tzset. gli...

EUVD-2026-119210

RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset, , so a FIFO or device path blocks the CGI process. The normalizeparams method sends any query key matching /tz/i to tz, which sets $ENVTZ to that value, with no validation. It then calls tzset. gli...

CVE-2026-123776

The RRD::CGI::Image Perl module (versions through 0.01 ) is vulnerable to a Denial of Service (DoS) due to improper validation of query parameters. The normalize_params method passes any query key matching /tz/i to the tz() function, which sets the $ENV{TZ} environment variable without validation...

CVE-2026-123776 RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process

RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset, , so a FIFO or device path blocks the CGI process. The normalizeparams method sends any query key matching /tz/i to tz, which sets $ENVTZ to that value, with no validation. It then calls tzset. gli...

CVE-2026-123776 RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process

RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset, , so a FIFO or device path blocks the CGI process. The normalizeparams method sends any query key matching /tz/i to tz, which sets $ENVTZ to that value, with no validation. It then calls tzset. gli...

PT-2026-139451

Name of the Vulnerable Software and Affected Versions RRD::CGI::Image versions prior to 0.01 Description The normalize params method fails to validate query keys matching /tz/i, passing their values directly to tz and subsequently to tzset. Because glibc interprets a TZ value starting with a...

CVE-2026-110802

A flaw was found in Altair. The application improperly handles script URLs supplied through URL query parameters in its iframe sandbox, allowing external scripts to be injected into the page without proper sandbox isolation. By convincing a victim to navigate to a specially crafted link, a remote...

CVE-2026-118662

A flaw was found in Vite. The Vite development server fails to properly enforce filesystem access restrictions before processing query parameters in requests. When the development server is exposed to the network, an unauthenticated remote attacker can bypass restriction rules by appending specif...

CVE-2026-111751

A flaw was found in @angular/router. A remote attacker can cause a Denial of Service DoS by sending requests with oversized query parameters to applications using Server-Side Rendering SSR, where web pages are generated on the server. When navigation links are configured to preserve or merge quer...

CLEANSTART-2026-JQ28777 net/url package does not set a limit on the number of query parameters in a query

CVE-2025-61726 affects multiple packages. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

CLEANSTART-2026-WO54413 ReverseProxy can forward queries containing parameters not visible to Rewrite functions

CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...

CLEANSTART-2026-NE13080 ReverseProxy can forward queries containing parameters not visible to Rewrite functions

CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...