EUVD-2026-91189

The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticated users to read the contact records of quote-request submissions, including records the site has not published...

WordPress Request a Quote plugin <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure vulnerability

Unauthenticated Quote Request Contact Record Disclosure vulnerability discovered by Artus KG in WordPress Plugin Request a Quote versions = 2.5.6...

CVE-2026-90988

The Request a Quote WordPress plugin in versions through 2.5.6 is vulnerable to unauthenticated contact record disclosure. The root cause is a missing authorization check on an unauthenticated AJAX handler , specifically involving emd_get_std_pagenum. This allows unauthenticated users to read pri...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – Переполнение буфера 5G NAS-сообщения в gNodeB Код программы симуляция на C // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length uint8t iebufferMAXIESIZE; //...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6 : Cross-Site Request Forgery CSRF — Supprimer n'importe quel utilisateur Sévérité: Élevée | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Table des matières Aperçu Détails de la vulnérabilité Impact Version concernée Scénario d'attaque Preu...

CVE-2024-54330

CVE-2024-54330 Hurrakify bfdibc85r04ky96cie05dfzjjgigz...

CVE-2019-2725-POC

CVE-2019-2725-POC CVE-2019-2725-POC Измените адрес бэкдора в txt на свой собственный, используйте Burp Suite для отправки POST-запроса на целевой сервер, содержимое запроса — это содержимое txt...

request_smuggler

Request smuggler Scanner de vulnérabilité de contrebande de requêtes HTTP Basé sur l'incroyable recherche de James Kettle. L'outil peut aider à trouver des serveurs qui pourraient être vulnérables à la vulnérabilité de contrebande de requêtes. Archivé L'outil nécessite beaucoup d'améliorations, e...

shadowd

Logo Shadow Daemon est un pare-feu applicatif web qui intercepte les requêtes au niveau de l'application. Ce dépôt contient le composant principal de Shadow Daemon qui gère l'analyse et le stockage des requêtes. Documentation Pour la documentation complète, veuillez vous référer à...

explo

explo explo est un outil simple pour décrire les problèmes de sécurité web dans un format lisible par les humains et par les machines. En définissant un workflow de requêtes/conditions, explo est capable d'exploiter des failles de sécurité sans avoir besoin d'écrire un script. Cela permet de...

CVE-2026-104120

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetchurl of the file mcpserverfetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request...

ExtendedMacro

ExtendedMacro ExtendedMacro est un plug-in pour le proxy BurpSuite. Il offre une fonctionnalité similaire mais étendue à celle des macros de BurpSuite. Sa fonction principale est de pouvoir déclencher une ou plusieurs requêtes avant chaque requête déclenchée depuis Intruder, Repeater, Scanner,...

CVE-2022-46364-htb-ctf

Outil d'exploitation SOAP DevArea CVE-2022-46364 Description Cet exploit spécialisé cible l'environnement DevArea sur Hack The Box. Il exploite une vulnérabilité critique dans Apache CXF 3.2.14 CVE-2022-46364 pour effectuer une inclusion locale de fichiers LFI et une falsification de requête côté...

CVE-2026-104120

A server-side request forgery (SSRF) vulnerability exists in the modelcontextprotocol components mcp-server-fetch and mcp-server-everything up to version 2026.6.4 . The flaw is located in the fetch_url function within the file mcp_server_fetch/server.py of the Fetch Tool component. An attacker ca...

CVE-2026-104120 modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetchurl of the file mcpserverfetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request...

CVE-2026-104120 modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery

A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetchurl of the file mcpserverfetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request...

Likeshop < 2.5.7.20210311 - Arbitrary File Upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file with an...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Apache OFBiz < 18.12.11 - Remote Code Execution

The vulnerability allows attackers to bypass authentication to achieve a simple Server-Side Request Forgery SSRF id: CVE-2023-51467 info: name: Apache OFBiz 18.12.11 - Remote Code Execution author: your3cho severity: critical description: | The vulnerability allows attackers to bypass...