EUVD-2026-83587

OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application stdout or centralized logging systems can capture base64-encoded credentials to replay MCP requests...

CVE-2022-24342

CVE-2022-24342 JetBrains TeamCity - GitHub 인증의 CSRF를 통한 계정 탈취 PoC CVE-2022-24342 요구 사항 사용법 작동 방식 GitHub OAuth2: 쿼리 파라미터 처리 순서 CVE-2022-24342: HTTP 요청 흐름 요구 사항 JetBrains TeamCity 로컬 머신에서 익스플로잇을 실행하는 경우 Ngrok이나 대체 도구가 필요할 수 있습니다. root@kitploit: $ ngrok http 8000...

Eclipse BIRT Viewer - Remote Code Execution

Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters. id: CVE-2021-34427 info: name: Eclipse BIRT Viewer - Remote Code...

CVE-2022-28346

CVE-2022-28346 PoC 影響: QuerySet.annotate、aggregate、extra における潜在的なSQLインジェクション。 インストール root@kitploit: poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC root@kitploit: ?field=poc.title" FROM "pocblog" union SELE...

Arjun

Arjun Набор для обнаружения HTTP-параметров Что такое Arjun? Arjun может находить параметры запроса для URL-адресов. Если вы не поняли, что это значит, ничего страшного, читайте дальше. Веб-приложения используют параметры или запросы для принятия пользовательского ввода, рассмотрим следующий прим...

CVE-2026-79713

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

EUVD-2026-82684

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-82191

Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A crafted link to the paypal notify endpoint, if followed by a victim's browser or an automated system that fetches it, causes the resulting redirec...

Astra Linux - Vulnerability in Golang-1.23

ReverseProxy can forward queries containing parameters that are not visible to the Rewrite function. When used with a Rewrite function, or a Director function that parses query parameters, ReverseProxy sanitizes the forwarded request by removing parameters that are not parsed by url.ParseQuery...

CVE-2025-49132

영향 /locales/locale.json에 locale 및 namespace 쿼리 매개변수를 사용하면, 인증 없이 악의적인 사용자가 임의 코드를 실행할 수 있습니다. 임의 코드 실행 능력을 통해 이 취약점은 무한한 방식으로 악용될 수 있습니다. 패널 서버에 접근하거나, 패널 구성 파일.env 등에서 자격 증명을 읽거나, 데이터베이스에서 민감한 정보사용자 세부 정보 사용자 이름, 이메일, 성과 이름, 해시된 비밀번호, IP 주소 등를 추출하거나, 패널이 관리하는 서버의 파일에 접근하는 등의 작업이 가능합니다. 사용 방법...

CVE-2025-49132

영향 /locales/locale.json을 locale 및 namespace 쿼리 매개변수와 함께 사용하면, 악의적인 공격자는 인증 없이 임의 코드를 실행할 수 있습니다. 임의 코드를 실행할 수 있게 되면, 이 취약점은 무수한 방식으로 악용될 수 있습니다. 패널 서버에 대한 접근 권한 획득, 패널의 구성config 파일.env 또는 그 외에서 자격 증명 읽기, 데이터베이스에서 민감한 정보사용자 이름, 이메일, 이름과 성, 해시된 비밀번호, IP 주소 등과 같은 사용자 세부 정보 추출, 패널이 관리하는 서버의 파일에 접근하는 ...

CVE-2019-7219

CVE-2019-7219 CVE-2019-7219 Zarafa Webapp 작성자: verifysecurity 최소한 Webapp 버전 1.6-46049부터 2.0.1.47791까지 영향을 받습니다. hxxps://127.0.0.1/webapp/?fccc0"5f43d=1...

EUVD-2026-76857

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authentication vulnerability in the plugin/TopMenu/menuItems.json.php endpoint that allows unauthenticated attackers to read inactive admin menu items by submitting a POST request with a menuId parameter...

golang: net/url: Memory exhaustion in query parameter parsing in net/url

A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...

CVE-2026-19651

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input...

CVE-2026-19651 IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.12

Red Hat OpenShift Service Mesh 3.1.12 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...

CVE-2026-74916

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

EUVD-2026-68990

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

CVE-2026-74916 WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...