wp-CVE-2017-5487-exploit

WordPress CVE-2017-5487 Exploit in Python Usage Examples: python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...

CVE-2026-82957

SSRF in Hyperledger FireFly Webhook Subscriptions CVE-2026-82957 A proof-of-concept exploit for CVE-2026-82957, a Server-Side Request Forgery CWE-918 in Hyperledger FireFly Core's webhooks event transport. Any client that can create an event subscription can register a webhook whose target URL is...

CVE-2020-11546

CVE-2020-11546 SuperWebMailer RCE USAGE python3 CVE-2020-11546.py -h, --help show this help message and exit python3 CVE-2020-11546.py -u https://target.com...

CVE-2022-27925

CVE-2022-27925 Setup git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 Usage usage: CVE-2022-2925.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST List of...

CVE-2026-23744

CVE-2026-23744 Proof-of-concept exploit for CVE-2026-23744 , provided for research and authorized penetration testing. Requirements Python 3 Network access to the target Usage Start a listener in one terminal and run the exploit in another. Terminal 1 — listener nc -nvlp 4444 Terminal 2 — exploit...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 python CVE-2022-46169.py tageturl...

CVE-2026-120327

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites...

CVE-2026-120327

The TYPO3 Extension "Mail" (mediaessenz/mail) is vulnerable to an Open Redirection (CWE-601) due to its click tracking middleware. The middleware accepts an arbitrary target URL and redirects the user to it, allowing attackers to misuse website links to redirect users to malicious external sites....

EUVD-2026-115742

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites...

CLEANSTART-2024-SO02742 Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL

CVE-2021-43536 affects multiple packages. Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. See references for individual vulnerability details...

CLEANSTART-2024-NW30195 Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL

CVE-2021-43536 affects multiple packages. Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. See references for individual vulnerability details...

EUVD-2026-110829

Improper neutralization of input during web page generation 'Cross-site Scripting' in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another use...

CVE-2026-116627

Devolutions PowerShell Universal versions 2026.3.0 and earlier are vulnerable to a Cross-Site Scripting (XSS) flaw in the notifications feature . The root cause is the improper neutralization of input during web page generation, which allows an authenticated user with notification creation permis...

PT-2026-126400

Improper neutralization of input during web page generation 'Cross-site Scripting' in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another use...

EUVD-2026-92020

OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-submit page. If reachable with cookieHashRedirectEnabled set, crafted requests could execute script in the OpenAM origin,...

EUVD-2026-77138

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

CVE-2026-90603

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

CVE-2026-90603 Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

CVE-2026-90603

CVE-2026-90603 affects Anil-matcha Open-Generative-AI versions up to 1.0.11/2.0.0 . The vulnerability resides in the S3 Upload component, specifically the /api/upload-binary endpoint, where manipulation of the x-proxy-target-url argument enables an unrestricted upload . An unauthenticated remote ...

CVE-2026-90603 Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...