spring-cloud-netflix-hystrix-dashboard-cve-2021-22053

CVE-2021-22053: Vulnerabilidad de resolución de plantillas en Spring Cloud Netflix Hystrix Dashboard Gravedad Alta Proveedor Spring por VMware Descripción Las aplicaciones que utilizan tanto spring-cloud-netflix-hystrix-dashboard como spring-boot-starter-thymeleaf exponen una manera de ejecutar...

CVE-2018-3760

CVE-2018-3760 Vulnerabilidad de Directory Traversal en el Asset Pipeline de Rails Descubierto por Orange Tsai Nota : De forma predeterminada, las aplicaciones Rails que se ejecutan en modo producción no son vulnerables a este exploit. Exploit: root@kitploit: curl -v...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

CVE-2020-24972

Entonces CVE-2020-24972 se deriva de otro CVE en realidad. No recuerdo el CVE que se designó, pero tiene que ver con la opción de línea de comandos platformpluginpath de Qt. En esencia, el problema proviene del uso de Qt, específicamente la opción platformpluginpath. "Este parámetro debe contener...

mIRC-CVE-2019-6453

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Link to the write-up We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument...

CVE-2023-1177

CVE-2023-1177 | | Path Traversal de MLFlow | Probado en MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution

Spring Cloud Netflix Hystrix Dashboard prior to version 2.2.10 is susceptible to remote code execution. Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view...

Solara <1.35.1 - Local File Inclusion

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

CVE-2021-22053

CVE-2021-22053 CVE-2021-22053: Vulnerabilidad de resolución de plantillas en Spring Cloud Netflix Hystrix Dashboard Descripción Las aplicaciones que utilizan tanto spring-cloud-netflix-hystrix-dashboard como spring-boot-starter-thymeleaf exponen una forma de ejecutar código enviado dentro de la...

CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking

CVE-2026-11102 – Secuestro de Fragmento en la Concesión Implícita de OAuth2 Código del Programa Node.js + Exploit root@kitploit: // oauthserver.js - OAuth2 provider issuing tokens in fragment const express = require'express'; const app = express; app.get'/authorize', req, res = const redirectUri ...

CVE-2019-14339

CVE-2019-14339 Inyección de URI de Content Provider en Canon PRINT 2.5.5 CVE-2019-14339. Prueba de concepto por @0x48piraj El ContentProvider en la aplicación Canon PRINT 2.5.5 para Android no restringe adecuadamente el acceso a los datos. Esto permite que una aplicación maliciosa de un atacante...

PT-2026-90508

libks provides foundational support for signalwire C products. Prior to version 2.0.11, clean uri in libks's HTTP request parser fails to reject URIs whose path has more segments than its internal canonicalization buffer can hold. The canonicalization step silently passes such URIs through with...

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...

RP_DCP_Code_Exec

Vulnerabilidad de ejecución remota de código arbitrario en el URI 'DCP://' de Real Player Vídeo demo: https://youtu.be/AMODp3iTnqY El esquema de URI 'DCP://' es un protocolo interno utilizado por Real Player para recuperar URL que mostrar en la pestaña del navegador del reproductor. Significa 'Da...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Vulnerabilidad de Ejecución Remota de Código Vídeo demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk El componente G2 Control de Real Player contiene una vulnerabilidad de ejecución remota de código porque permite que se pasen URI 'javascript:' como...

CVE-2026-52097

An issue in AppFlowy 0.11.8 allows a remote attacker to execute arbitrary code via the afLaunchUri, afLaunchLocalUri urllauncher.dart, OpenFilex.open, localPathRegex commonpatterns.dart components...

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...

svg-cheatsheet

Hoja de referencia de SSRF en SVG Los hosts que procesan SVG pueden ser potencialmente vulnerables a SSRF, LFI, XSS, RCE debido al rico conjunto de características de SVG. Todos estos métodos especifican una URI, que puede ser absoluta o relativa. Los protocolos file y HTTP son importantes de...

nginx-rift-detector

Detector de Rift NGINX para CVE-2026-42945 Verificador Bash de solo lectura para servidores NGINX comprometidos. Ayuda a un operador a responder dos preguntas tras la divulgación de CVE-2026-42945: ¿Este servidor sigue ejecutando una compilación NGINX expuesta o una configuración de reescritura...