630 matches found
POC-CVE-2018-25031
CVE-2018-25031 - Swagger UI antes de 4.1.3 Un simple POC CVE-2018-25031 que engaña a la víctima para que ingrese el código de autorización, el cual luego se envía al atacante. Puedes usarlo con la vulnerabilidad XSS https://github.com/VictorNS69/swagger-ui-xss Es necesario encontrar el parámetro ...
Swagger-HTML-Injection-CVE-2025-8191
https://example.com/swagger/swagger.html?configURL=https://raw.githubusercontent.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191/refs/heads/main/test.json...
test-xss-swagger-CVE-2019-1749
Este repositorio no tiene un README...
CVE-2018-25031
POC de Cross-Site Scripting en Swagger UI: CVE-2018-25031 utilizando Selenium en Python Este repositorio contiene un script en Python que demuestra una prueba de concepto POC de una vulnerabilidad de Cross-Site Scripting XSS en Swagger UI, usando la biblioteca Selenium. El objetivo de esta POC es...
CVE-2025-8191
CVE-2025-8191 – Inyección XSS en Swagger UI Descripción : Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE‑2025‑8191, una vulnerabilidad encontrada en Swagger UI. La vulnerabilidad permite la inyección de Cross‑Site Scripting XSS en el campo “description”, lo que conduce a ...
SwaggerUI-CVE-2018-25031
Exploit Swagger UI - CVE-2018-25031 Exploit Swagger UI - Representación incorrecta de información crítica en la interfaz de usuario UI CVE-2018-25031. Este exploit comprueba si la interfaz de usuario de Swagger utilizada es susceptible a la explotación de la vulnerabilidad de representación...
CVE-2026-100680
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...
CVE-2026-100680
Budibase versions prior to 3.45.0 are vulnerable to an arbitrary local file read vulnerability due to the failure to disable external JSON reference resolution in the OpenAPI/Swagger import validator . An authenticated user with builder access can submit OpenAPI specifications containing file:// ...
EUVD-2026-87653
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...
CVE-2026-100680 Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...
PT-2026-99351
Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.45.0 Description Authenticated builders can read arbitrary local files because the OpenAPI/Swagger import validator fails to disable external JSON reference resolution. By embedding file:// references within OpenAP...
CVE-2026-100680: Exposure of Sensitive Information to an Unauthorized Actor
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...
sj v2.8.2
sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...
CVE-2026-21759
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...
CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...
CVE-2026-21759
HCL Hive is affected by an information exposure vulnerability in which Swagger API documentation was publicly accessible to unauthenticated users. No sensitive data (credentials, PII) was discovered, but the exposure increases the overall attack surface by revealing API structure to potential att...
EUVD-2026-64837
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...
CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...
CVE-2026-21759: Insertion of Sensitive Information Into Debugging Code
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...
PT-2026-80822
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...