CVE-2026-48710

CVE-2026-48710 Principle: Starlette is an open-source, lightweight Python ASGI framework. The root cause is that when processing URL data structures, Starlette trusts the host sent by the client and directly concatenates it into the url variable for subsequent authentication handling. The raw URL...

CVE-2021-21017

CVE-2021-21017 또 다른 Adobe Reader Byte Order Mark 버그가 아닙니다 : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != cha...

CVE-2021-21017

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bug : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl !=...

CVE-2026-58201

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially...

CVE-2026-58201

Lokka (@merill/lokka), a Model Context Protocol server for Microsoft 365, is vulnerable to SSRF in versions prior to 2.1.2 . The root cause is in src/mcp/src/main.ts, where the tool constructs Azure Resource Manager request URLs via direct string concatenation with a user-controlled path value. A...

EUVD-2026-78934

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially...

CVE-2026-55509 WsgiDAV: Blind SQL injection in the MySQL provider

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysqldavprovider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected existsrecordbyprimarykey, getfieldbyprimaryke...

CVE-2025-61524

An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, and fixed in v.2.63.0, allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly...

CVE-2025-61524

An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, and fixed in v.2.63.0, allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly...

CVE-2022-45429

Some Dahua software products have a vulnerability of server-side request forgery SSRF. An Attacker can access internal resources by concatenating links URL that conform to specific rules...

CVE-2018-10799

The affected software is Brave (pre-0.14.0, e.g., on Linux). The issue arises from mishandling a long URL formed via window.location+= '?\u202a\uFEFF\u202b'; in a SCRIPT element, causing a hang/denial of service. Connected sources (Red Hat advisory, NVD entries, CNVD, etc.) confirm the same descr...