wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting

WordPress amty-thumb-recent-post plugin 8.1.3 contains a cross-site scripting vulnerability via the query string to amtyThumbPostsAdminPg.php. id: CVE-2017-17059 info: name: WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress...

CVE-2026-123808

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

CVE-2026-123808

The Nuxt UI Vue UI library (prior to version 4.8.1 ) contains a vulnerability where the server-rendered form element produced by UForm (located in src/runtime/components/Form.vue) omits the method and action attributes. The component relies entirely on a hydrated @submit.prevent handler to block ...

EUVD-2026-120439

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

PT-2026-141121

Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. Prior to 4.8.1, the server-rendered form element produced by UForm in src/runtime/components/Form.vue omits the method and action attributes and relies solely on the hydrated @submit.prevent handler to stop native...

CVE-2019-11043

CVE-2019-11043 PHP-FPM Remote Code Execution Screencast: https://youtu.be/d6benC5FVZM Overview This zero-day exploit in common PHP-FPM configurations was discovered during the Realworld CTF competition in 2019. A regular expression is used to parse the requested URI, but newline characters %0a ar...

CVE-2025-30208-PoC

CVE-2025-30208 - Vite Arbitrary File Read PoC This is a Proof-of-Concept PoC script to exploit CVE-2025-30208, allowing arbitrary file reads on Vite development servers. Vulnerability Details Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2,...

CVE-2012-1823

PHP CGI Argument Injection CVE-2012-1823 Description sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by...

CVE-2019-12189

CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability Information Description:XSS was discovered in ManageEngine ServiceDesk Plus version Versions Affected: 9.3 Researcher: Dang The Tuyen Proof-of-concept The vulnerability stems from the confusion of both single quotes and...

CVE-2019-11043-Docker

A docker image with a vulnerable version of PHP-FPM CVE-2019-11043 and nginx. Run docker run --rm -p8080:80 akamajoris/cve-2019-11043 You should be able to access the web application at http://your-ip:8080/. Exploitation Build a binary from https://github.com/neex/phuip-fpizdam, then...

CVE-2026-116693

A flaw was found in dd-trace. A remote attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request with a malicious URL query string. The default regular expression used to obfuscate query string metadata performs excessive backtracking during evaluation, consuming high...

CVE-2026-122312 Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String

Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch in pkg/engine/apicall/apiCall.go because path.Clean treats '?' as a path character, letting the namespace regex match segments inside the query string. Users who can create namespaced policies can supply a...

CVE-2026-122312

Kyverno versions 1.19.1 before 1.19.2 are vulnerable to a namespace isolation bypass within the APICall Fetch() function located in pkg/engine/apicall/apiCall.go. The root cause is that path.Clean incorrectly treats the '?' character as a path character, allowing namespace regexes to match segmen...

CVE-2026-122312 Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String

Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch in pkg/engine/apicall/apiCall.go because path.Clean treats '?' as a path character, letting the namespace regex match segments inside the query string. Users who can create namespaced policies can supply a...

VulnCheck KEV: CVE-2021-42911

A Format String vulnerability exists in DrayTek Vigor 2960 = 1.5.1.3, DrayTek Vigor 3900 = 1.5.1.3, and DrayTek Vigor 300B = 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code...

qs: qs: Query parameter injection via unencoded empty array keys

A flaw was found in qs. When the library is configured to allow empty arrays during query string serialization, it fails to encode object keys that contain empty array values. A remote attacker who can provide untrusted input key names can exploit this flaw by supplying keys containing query...

CVE-2026-120428 PandaWiki 3.65.0 through 3.87.5 Stored XSS via /static-file/ PDF Query-String Bypass

PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to upload HTML files with image extensions via /share/v1/common/file/upload. Attackers can lure administrators to /static-file/?a=.pdf, bypassing the nginx attachment header ...

CVE-2026-120428 PandaWiki 3.65.0 through 3.87.5 Stored XSS via /static-file/ PDF Query-String Bypass

PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to upload HTML files with image extensions via /share/v1/common/file/upload. Attackers can lure administrators to /static-file/?a=.pdf, bypassing the nginx attachment header ...

CVE-2026-110910

Summary qs.stringify with allowEmptyArrays: true writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains & or the configured delimiter, =, or therefore becomes query string syntax instead of data, so a caller-supplied key name can add...