CVE-2022-28346

CVE-2022-28346 PoC 영향: QuerySet.annotate, aggregate 및 extra에서 잠재적 SQL 인젝션. 설치 poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC ?field=poc.title" FROM "pocblog" union SELECT "-1,",sqliteversion,"3" -- 참고 자료 C...

Arjun

Arjun HTTP 파라미터 발견 스위트 Arjun이란 무엇인가? Arjun은 URL 엔드포인트에서 쿼리 파라미터를 찾을 수 있습니다. 무슨 뜻인지 이해가 안 가도 괜찮습니다. 계속 읽어보세요. 웹 애플리케이션은 사용자 입력을 받기 위해 파라미터또는 쿼리를 사용합니다. 다음 예를 살펴보세요. http://api.example.com/v1/userinfo?id=751634589 이 URL은 특정 사용자 ID에 대한 사용자 정보를 불러오는 것으로 보입니다. 하지만 admin이라는 파라미터가 존재하고, 이 파라미터를 True로 설정...

CVE-2022-24342

CVE-2022-24342 JetBrains TeamCity - GitHub 인증의 CSRF를 통한 계정 탈취 PoC CVE-2022-24342 요구 사항 사용법 작동 방식 GitHub OAuth2: 쿼리 파라미터 처리 순서 CVE-2022-24342: HTTP 요청 흐름 요구 사항 JetBrains TeamCity 로컬 머신에서 익스플로잇을 실행하는 경우 Ngrok이나 대체 도구가 필요할 수 있습니다. $ ngrok http 8000 2. GitHub OAuth2 애플리케이션을 생성합니다: homepage:...

Eclipse BIRT Viewer - Remote Code Execution

Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters. id: CVE-2021-34427 info: name: Eclipse BIRT Viewer - Remote Code...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because unauthenticated HTTP endpoints process specific URL query parameters without performing numerical range checks or validating array index boundaries ...

EUVD-2026-94667

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...

CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...

CLEANSTART-2026-MC77082 ReverseProxy can forward queries containing parameters not visible to Rewrite functions

Security vulnerability affects the temporal-server package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...

CLEANSTART-2026-DH14395 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the go1.27 package. The net/url package does not set a limit on the number of query parameters in a query...

CVE-2025-49132

영향 /locales/locale.json에 locale 및 namespace 쿼리 매개변수를 사용하면, 인증 없이 악의적인 사용자가 임의 코드를 실행할 수 있습니다. 임의 코드 실행 능력을 통해 이 취약점은 무한한 방식으로 악용될 수 있습니다. 패널 서버에 접근하거나, 패널 구성 파일.env 등에서 자격 증명을 읽거나, 데이터베이스에서 민감한 정보사용자 세부 정보 사용자 이름, 이메일, 성과 이름, 해시된 비밀번호, IP 주소 등를 추출하거나, 패널이 관리하는 서버의 파일에 접근하는 등의 작업이 가능합니다. 사용 방법...

CVE-2025-49132

影響 /locales/locale.json を locale および namespace クエリパラメータとともに使用することで、悪意のある攻撃者は認証なしで任意のコードを実行することができます。 任意のコードを実行できるため、この脆弱性は無数の方法で悪用される可能性があります。パネルのサーバーへのアクセス権の取得、パネルの設定（.env またはその他）からの認証情報の読み取り、データベースからの機密情報の抽出（ユーザー名、メールアドレス、姓名、ハッシュ化されたパスワード、IP アドレスなどのユーザー詳細）、パネルが管理するサーバーのファイルへのアクセスなどに使用される可能性がありま...

CVE-2019-7219

CVE-2019-7219 CVE-2019-7219 Zarafa Webapp 작성자: verifysecurity 최소한 Webapp 버전 1.6-46049부터 2.0.1.47791까지 영향을 받습니다. hxxps://127.0.0.1/webapp/?fccc0"5f43d=1...

CVE-2026-103261

A flaw was found in Tornado. When processing incoming HTTP requests, Tornado fails to restrict the number of parameters parsed from the URL query string. A remote, unauthenticated attacker could exploit this flaw by sending requests with an excessive number of query parameters, leading to high CP...

UBUNTU-CVE-2026-103261

Tornado before 6.5.9 fails to limit the number of query string fields in HTTPServerRequest.init, allowing remote attackers to cause event-loop stalling by sending requests with thousands of query parameters. Attackers can send unauthenticated GET requests with unbounded query-string field counts ...

CLEANSTART-2026-QA21098 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the cri-tools package. The net/url package does not set a limit on the number of query parameters in a query...

CLEANSTART-2026-QL84214 ReverseProxy can forward queries containing parameters not visible to Rewrite functions

CVE-2026-39825 affects multiple packages. ReverseProxy can forward queries containing parameters not visible to Rewrite functions. See references for individual vulnerability details...

Rocky Linux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2026:1773161647)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773161647 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs...

AlmaLinux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2026:1773161647)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773161647 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs i...

CLEANSTART-2026-PN80306 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the coredns package. The net/url package does not set a limit on the number of query parameters in a query...

CLEANSTART-2026-FO79285 ReverseProxy can forward queries containing parameters not visible to Rewrite functions

Security vulnerability affects the loki package. ReverseProxy can forward queries containing parameters not visible to Rewrite functions...