EUVD-2026-125125

Zipline before 4.6.4 contains a rate limit bypass vulnerability that allows remote attackers to evade request limits by varying query strings or supplying the x-zipline-p-filename header. Attackers can append differing query parameters to login and file or short-link password verification endpoin...

wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

CVE-2026-122312

A flaw was found in Kyverno. An authenticated user with permissions to create namespaced policies can bypass namespace isolation restrictions by supplying a specially crafted API call URL path containing query strings. Because the path validation mechanism improperly handles query characters,...

CVE-2026-120640

A flaw was found in perl-cgi. This vulnerability allows a remote attacker to conduct request forgery by spoofing internal request body parameters through query strings or form fields. Because the module does not distinguish between actual request payloads and user-supplied parameters, an attacker...

CVE-2026-120206 Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions

Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forge administrative actions because per-session CSRF tokens leak via URL query strings. Attackers can reuse leaked tokens or target the unprotected setToggleVisibilityAction and...

CVE-2026-62864

The Ring Clojure web applications library is vulnerable to a Regular-Expression Denial of Service (ReDoS) in versions prior to 1.15.5 . The wrap-nested-params function in the ring.middleware.nested-params namespace uses a backtracking regular expression to match parameter names from URL query str...

CVE-2026-116693: Inefficient Regular Expression Complexity

dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DDTRACEOBFUSCATIONQUERYSTRINGREGEXP can perform excessive backtracking on attacker-controlled URL query strings. The expression is applied synchronously while recording HTTP URL metadata, allowing a...

PT-2026-125468

Name of the Vulnerable Software and Affected Versions dd-trace-py versions 1.5.0 through 3.19.8 dd-trace-py versions 4.x through 4.15.5 Description The default query-string obfuscation regular expression in the Datadog Python APM client can exhibit excessive backtracking when synchronously...

Cross-site Scripting (XSS)

Overview vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Cross-site Scripting XSS via the getHtmlFilename function in packages/vite/src/node/server/middlewares/indexHtml.ts, where query strings are not stripped from the URL before the filename i...

Cross-site Scripting (XSS)

Overview org.webjars.npm:vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Cross-site Scripting XSS via the getHtmlFilename function in packages/vite/src/node/server/middlewares/indexHtml.ts, where query strings are not stripped from the URL befor...

PT-2026-118508

Name of the Vulnerable Software and Affected Versions ApostropheCMS versions 3.x and 4.0.0 through 4.32.2 Description A client-side prototype pollution issue exists in the apos.http.parseQuery function. The parser fails to sanitize the proto , constructor, and prototype keys when processing URL...

Use of GET Request Method With Sensitive Query Strings

Overview auth0-lock is a plugin for Auth0. Affected versions of this package are vulnerable to Use of GET Request Method With Sensitive Query Strings via the Active Directory login flow in the auth0-lock enterprise authentication components. An attacker can expose the user's Active Directory...

Use of GET Request Method With Sensitive Query Strings

Overview org.webjars.npm:auth0-lock is a WebJar for auth0-lock. Affected versions of this package are vulnerable to Use of GET Request Method With Sensitive Query Strings via the Active Directory login flow in the auth0-lock enterprise authentication components. An attacker can expose the user's...

CVE-2026-107370: Use of GET Request Method With Sensitive Query Strings

When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters...

CVE-2026-108808

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

CVE-2026-108808 Eleveo Call Recording Software JWT Token logout get request method with sensitive query strings

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

EUVD-2026-97261

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

CVE-2026-108808

A vulnerability exists in Eleveo Call Recording Software up to version 10.3.0 within the JWT Token Handler component. Specifically, the file /auth/realms/default/protocol/openid-connect/logout is affected. By manipulating the id_token_hint argument, an attacker may cause the application to use th...

PT-2026-110482

Name of the Vulnerable Software and Affected Versions Eleveo Call Recording Software versions prior to 10.3.1 Description An issue exists in the JWT Token Handler component within the file /auth/realms/default/protocol/openid-connect/logout. A remote attacker can manipulate the id token hint...

CVE-2026-108808: Use of GET Request Method With Sensitive Query Strings

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...