extended-ssrf-search

扩展SSRF搜索 该工具使用预定义设置搜索请求的不同部分（路径、主机、头信息、POST和GET参数）中的SSRF漏洞。 第一步 将example.app-settings.conf重命名为app-settings.conf并调整设置。最重要的设置是回调URL。我建议使用burp collaborator。 然后，您可以将您的URL添加到config/url-to-test.txt。脚本接受域名以及带有路径和查询参数的URL。...

CVE-2026-107375

Applications generated using JHipster (versions 7.0.0 through 9.4.0) are vulnerable to SQL Injection when using Spring WebFlux , Spring Data R2DBC , and a SQL database. The vulnerability exists because the sort request parameter from paginated entity-list endpoints is passed into the createOrderB...

Jenkins-CVE-2024-23897-Lab

Jenkins CVE-2024-23897 Lab Jenkins 2.441 及更早版本中的任意文件读取漏洞。 启动 docker-compose up -d 自动攻击 docker exec -it attacker-host ./auto-exploit.sh 手动攻击 docker exec -it attacker-host bash cd /tmp curl -o jenkins-cli.jar http://vulnerable-jenkins:8080/jnlpJars/jenkins-cli.jar Первая строка файла java -jar...

poc-cve-2018-1273

CVE-2018-1273 Spring Data Commons，1.13 至 1.13.10、2.0 至 2.0.5 之前的版本以及更早的不受支持版本，包含一个由于未正确中和特殊元素而导致的属性绑定器（property binder）漏洞。未经身份验证的远程恶意用户（或攻击者）可以针对基于 Spring Data REST 的 HTTP 资源提供特制的请求参数，或利用 Spring Data 基于投影（projection）的请求负载绑定，从而导致远程代码执行攻击。 更多信息请参阅此处 运行 该应用程序可以使用存在漏洞的版本或已修复的 Spring Data Commons...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 nuclei 模板 Joomla CVE-2023-23752 - 一个请求参数突破 Rest API 受影响版本 Joomla 大致有三个路由入口，分别是： 1. 根目录下的 index.php（用户访问文章） 2. 根目录下的 administrator/index.php（管理员管理） 3. 根目录下的 api/index.php（供开发者使用的 Rest API） 未授权接口正是第三个入口。因此，只有 Joomla 4.0.0 至 Joomla 4.2.7 受影响（Rest API 4.x 为官方开发） 在此发送请求...

CVE-2026-104712 Apache Struts: Disproportionate response size when rendering BigDecimal request parameters

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

CVE-2025-52289

CVE-2025-52289：MagnusBilling v7.8.5.3 中的访问控制缺陷 描述 MagnusBilling 在版本 v7.8.5.3 之前存在 访问控制缺陷 漏洞。新注册用户可以通过修改请求参数，无需管理员批准即可将其账户状态从 待审核 提升为 激活。这允许未经授权访问本应仅供已验证用户使用的系统功能。 影响 严重性： 高 漏洞类型： 权限提升 / 访问控制缺陷 CVE 编号： CVE-2025-52289 补丁 该问题已在版本 v7.8.5.3 中修复。 🔗 供应商补丁提交 致谢 发现者：Madhav Bhardwaj...

CVE-2026-76143

A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter...

CVE-2026-76143

A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter. The provided documents do not specify the exact affected version, the specific component or file involved, or the specific remediation steps....

EUVD-2026-90485

A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter...

PT-2026-103678

Name of the Vulnerable Software and Affected Versions Genian SSL PNS affected versions not specified Description A missing authorization issue in the public-facing VPN/ZTNA gateway allows an attacker to bypass multi-factor authentication MFA by manipulating a login request parameter. This could...

CVE-2026-76143: Missing Authorization

A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter...

CVE-2026-101109

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager Free tag, to be injected into the page...

CVE-2026-101109 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager Free tag, to be injected into the page...

CVE-2026-101109 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager Free tag, to be injected into the page...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in http-proxy-middleware

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in http-proxy-middleware in versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-55602 DESCRIPTION: http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0,...

CVE-2026-101109: Improper Neutralization of Input During Web Page Generation

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager Free 6.5.8 - The public vehicle-detail page task=view echoes the title request parameter directly into a double-quoted HTML attribute with no output encoding of any kind. A double-quote character in the parameter...

Debian dla-4797 : lemonldap-ng - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4797 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4797-1 [email protected] https://www.debian.org/lts/security/...

CVE-2026-76790

The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several values decoded from a request parameter before reflecting them back in an unauthenticated AJAX response, leading to Reflected Cross-Site Scripting...

CVE-2026-86796

The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooCommerce request before disabling its firewall, threat-detection and login/URL-hiding protections, treating the mere presence of an attacker-suppliable request parameter as sufficient, which allows...