EUVD-2026-72756

XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to execute arbitrary JavaScript in the board origin by crafting a malicious javascript: URI that bypasses host validation. Attackers can embed the board hostna...

CVE-2026-73319

XenForo versions prior to 2.3.13 are affected by a cross-site scripting (XSS) vulnerability in the dynamic redirect handler . The root cause is that unauthenticated attackers can craft a malicious javascript: URI that embeds the board hostname in the authority component and uses percent-encoded n...

CVE-2026-73319 XenForo < 2.3.13 XSS via Dynamic Redirect Handler

XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to execute arbitrary JavaScript in the board origin by crafting a malicious javascript: URI that bypasses host validation. Attackers can embed the board hostna...

CVE-2026-73310

XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by submitting a different allowlisted URI than the one recorded at authorization time. Attackers can then exchange an int...

EUVD-2026-72781

XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by submitting a different allowlisted URI than the one recorded at authorization time. Attackers can exchange an...

CVE-2026-80219

A flaw was found in hawtio-operator. When deploying Hawtio in cluster mode, the operator creates a cluster-scoped OAuthClient with automatic grant approval GrantMethod: auto and no client secret public client. The redirect URIs are derived from the operator-created Route, whose hostname is...

CVE-2026-80219 Hawtio-operator: hawtio-operator: oauthclient created with grantmethod auto and no secret enables oauth token theft

A flaw was found in hawtio-operator. When deploying Hawtio in cluster mode, the operator creates a cluster-scoped OAuthClient with automatic grant approval GrantMethod: auto and no client secret public client. The redirect URIs are derived from the operator-created Route, whose hostname is...

EUVD-2026-72694

A flaw was found in hawtio-operator. When deploying Hawtio in cluster mode, the operator creates a cluster-scoped OAuthClient with automatic grant approval GrantMethod: auto and no client secret public client. The redirect URIs are derived from the operator-created Route, whose hostname is...

CVE-2026-80219 Hawtio-operator: hawtio-operator: oauthclient created with grantmethod auto and no secret enables oauth token theft

A flaw was found in hawtio-operator. When deploying Hawtio in cluster mode, the operator creates a cluster-scoped OAuthClient with automatic grant approval GrantMethod: auto and no client secret public client. The redirect URIs are derived from the operator-created Route, whose hostname is...

CVE-2026-80219

A flaw in hawtio-operator (OpenShift cluster mode) allows OAuth token theft. The operator creates a cluster-scoped OAuthClient with GrantMethod: auto and no client secret (public client). Because redirect URIs are derived from an operator-created Route whose hostname is tenant-controlled via the ...

CVE-2026-80219

A flaw was found in hawtio-operator. When deploying Hawtio in cluster mode, the operator creates a cluster-scoped OAuthClient with automatic grant approval GrantMethod: auto and no client secret public client. The redirect URIs are derived from the operator-created Route, whose hostname is...

CVE-2026-86550

NuBrowser lacks protocol whitelist validation for the S.browserfallbackurl field of intent://, allowing attackers to inject javascript: URLs via 302 redirects. This results in a universal cross‑site scripting UXSS vulnerability that enables script execution within the origin of arbitrary websites...

CVE-2021-36749

CVE-2021-36749 Apache Druid 任意文件读取 受影响版本：version = 0.21.1 使用以下两种方式均可 命令行方式 root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST -d...

CVE-2014-6271

EXPLOTACIÓN PARA CVE-2014-6271 USO : CVE-2014-6271.py ruta completa a la uri objetivo comando...

zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri

CVE-2026-10672 — Prueba de Concepto de Lectura Fuera de Límites en la Actualización de Firmware LwM2M de Zephyr Prueba de concepto para CVE-2026-10672 , una lectura fuera de límites en el cliente de extracción de actualización de firmware LwM2M de Zephyr RTOS...

CVE-2015-7214

CVE-2015-7214 什么是 CVE-2015-7214？ 请参阅以下链接。 通过 data 与 view-source URI 进行的跨站读取攻击 内容 www/index.html 用于 Web 的 SOP 绕过 PoC local/index.html 用于本地的 SOP 绕过 PoC 要求 Firefox 42.0 或更早版本 以下是各平台 Firefox 42.0 的下载链接。 Windows https://ftp.mozilla.org/pub/firefox/releases/42.0/win32/ja/Firefox%20Setup%2042.0.exe Mac...

ActiveMQ-cve-2026-42588-scanner-gui

ActiveMQ-cve-2026-42588-scanner-gui 【VPS一键利用 推荐有VPS的用户】 1. 输入 VPS 公网IP 和 监听端口 如 9999 2. 输入要执行的命令 如: touch /tmp/cvepwned 3. 点击【生成VPS命令】→ 点击【复制命令】 4. SSH登录VPS，粘贴命令并回车执行 5. 看到 Serving HTTP on 0.0.0.0:9999 说明服务已启动 6. 回到工具，点击【执行利用】发送Payload 7. 查看VPS终端，如果看到 GET /evil.xml 说明利用成功！ 【DNSLog验证 最简单，无需VPS】 1...

CVE-2025-1015

CVE-2025-1015：Thunderbird 通讯录包含未净化的 URI 字段，可能被攻击者利用。通过创建带有恶意链接的通讯录，攻击者可诱骗其他用户导入被入侵的通讯录。如果用户在 Thunderbird 中点击未净化的链接，可能导致在 Thunderbird 客户端内打开的网页上任意执行非特权 JavaScript。这会带来严重的安全风险，因为攻击者可能借此操纵用户会话或窃取敏感信息。...

CVE-2008-5862-EXPLOIT

CVE-2008-5862 - webcamXP 5.3.2.375 和 5.3.2.410 中的目录遍历漏洞 此仓库包含 CVE-2008-5862 的利用代码，该安全漏洞存在于 webcamXP 5.3.2.375 和 5.3.2.410 build 2132 版本中。该利用代码利用目录遍历缺陷，使远程攻击者能够未经授权访问任意文件并读取其内容。 漏洞描述 CVE-2008-5862 是一个严重的安全漏洞，攻击者可通过操纵 URI 执行目录遍历攻击。通过使用编码的点-点-斜杠序列（%2F），远程攻击者可以绕过访问控制并从目标系统获取敏感信息。 利用详情 该利用代码利用...

CVE-2026-86431

league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...