CVE-2026-103276 Ghost before 6.20.0 File Read via URL Encoding Bypass

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files...

CVE-2026-103276 Ghost before 6.20.0 File Read via URL Encoding Bypass

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files...

CVE-2026-103276 Ghost before 6.20.0 File Read via URL Encoding Bypass

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files...

CVE-2023-32315-EXPLOIT

CVE-2023-32315 - Bypass de Autenticación en Openfire Este repositorio destaca un problema de seguridad grave que afecta a varias versiones de Openfire. Openfire, un servidor de colaboración en tiempo real multiplataforma que utiliza el protocolo XMPP desarrollado por la comunidad Ignite Realtime,...

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Overview On September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding CWE-177. An...

CVE-2021-42013

CVE-2021-42013 — PoC : Path Traversal + RCE via modcgi contournement du correctif À utiliser uniquement dans des environnements contrôlés et personnels. Ne pas utiliser contre des systèmes sans autorisation. Description PoC développée pour démontrer CVE-2021-42013 , présente dans Apache HTTP Serv...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Contournement non autorisé de WebLogic menant à une RCE CVE-2020-14882 Script de test du contournement non autorisé d'Oracle WebLogic menant à une RCE Fonctionne sous Python3 Requêtes POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows ...

CVE-2021-41773

CVE-2021-41773 Bac à sable Ceci est une petite recette Docker pour configurer un conteneur basé sur Debian bookworm avec une instance d'Apache HTTPd 2.4.49 qui est vulnérable à CVE-2021-41773. CGI a été explicitement activé afin qu'il puisse être utilisé pour tester/vérifier le comportement de...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 Un scanner automatique pour Apache 2.4.49 • Exécution : go run main.go OU go build main.go && ./main • vous pouvez personnaliser votre payload • les hôtes vulnérables sont sauvegardés Créez votre laboratoire : 1. Tirer l'image : sudo docker pull...

CVE-2026-85706-gitlab-poc

CVE-2026-85706 Описание Уязвимость неаутентифицированного произвольного чтения файлов в GitLab CE/EE CVE-2026-85706. Уязвимые версии: GitLab CE/EE 18.7 – 19.1.7 GitLab CE/EE 19.2.0 – 19.2.5 GitLab CE/EE 19.3.0 – 19.3.1 Исправленные версии: GitLab 19.1.8 GitLab 19.2.6 GitLab 19.3.2 Детали уязвимос...

CVE-2021-42013

CVE-2021-42013 Автор 석은호@eunho87 CVE-2021-42013 Обход пути в Apache http Server Краткое описание уязвимости Из-за ошибки в обработке нормализации путей в Apache HTTP Server 2.4.50 можно без аутентификации читать произвольные файлы или выполнять удаленный код. Возникла из-за неполного исправления...

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor...

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 CVSS score: 9.8, a critical security flaw that could resul...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core

Summary IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core Vulnerability Details CVEID:CVE-2026-59083 DESCRIPTION: Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations...

Improper Handling of URL Encoding (Hex Encoding)

Overview Affected versions of this package are vulnerable to Improper Handling of URL Encoding Hex Encoding in validateuri and parsesrv, which apply unquoteplus to the entire host section of a connection string before splitting it on , and :, so a percent-encoded delimiter decodes into a real one...

CVE-2026-96748: Improper Handling of URL Encoding (Hex Encoding)

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

wildfly-elytron-realm-token: parameter injection in EAP's elytron oauth2

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

wildfly-elytron-realm-token: parameter injection in EAP's elytron oauth2

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

CVE-2026-85511

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding...

CVE-2026-85511

A parameter injection flaw was identified in Red Hat EAP's Elytron security subsystem. Specifically, an EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection allows parameter substitution due to missing URL encoding . The vulnerability is rated MEDIUM...