EUVD-2026-93507

Payload external upload trust validation issue...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR ऑन-प्रिमाइस संस्करण "4.4.0" से पहले वाला निम्नलिखित URLs के माध्यम से सूचना प्रकटीकरण भेद्यता के लिए संवेदनशील है: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds...

CVE-2026-105861

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2022-46169

CVE-2022-46169 सेटअप git clone https://github.com/miko550/CVE-2022-46169.git cd CVE-2022-46169 उपयोग usage: CVE-2022-46169.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST List o...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2026-105861

The headless content management system Payload is vulnerable in versions after 3.0.0 and before 3.90.0 . The flaw resides in the authenticated external URL-based upload retrieval feature, where the system fails to verify the trustworthiness of a redirected destination. This origin validation erro...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

PT-2026-106794

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.1 through 3.89.9 Description Authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that has not been verified as trusted. This behavior may expose a valid session to ...

CVE-2023-4165

CVE-2023-4165 fofa：通达 OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u ملف هدف URL واحد python3 CVE-2023-4165.py -f url.txt ثم تحقق من العنوان فقط...

CVE-2024-4956

CVE-2024-4956 LFI के लिए CVE-2024-4956 का त्वरित और आसान शोषण, मूल PoC पर आधारित: VeryLazyTech, https://github.com/verylazytech/CVE-2024-4956. यह कार्यान्वयन 2 तर्क लेता है: url और file, और यदि फ़ाइल मिलती है तो उसका आउटपुट प्रस्तुत करता है।...

CVE-2026-88774

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP...

CVE-2026-88774

CVE-2026-88774 is a policy bypass vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway caused by improper HTTP URL based expression usage. The flaw affects appliances where any policy utilizes these expressions. To remediate, users should upgrade to NetScaler ADC/Gateway 14.1-73.37 ...

CVE-2026-88774 Feature policy bypass due to improper HTTP URL based expression usage

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP...

EUVD-2026-87960

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP...

PT-2026-99553

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC versions prior to 14.1-73.37 Citrix NetScaler ADC versions prior to 13.1-64.23 Citrix NetScaler ADC versions prior to 14.1-73.37 FIPS Citrix NetScaler ADC versions prior to 13.1.37.279 FIPS and NDcPP Citrix NetScaler Gatew...

CVE-2026-88774: Improper Input Validation

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP...

SUSE CVE-2026-86251

h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...

CVE-2026-86251: Improper Limitation of a Pathname to a Restricted Directory

h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...

CVE-2026-9592

SEPPmail Secure Email Gateway & SEPPmail Cloud prior to 15.0.4.2 are vulnerable. The issue arises because the session token is disclosed in the URL and an HTTP header within the GINA web portal, allowing an attacker to replay and hijack a user session. Affected component: GINA web portal session ...

CVE-2026-44746 Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet)

Due to a reflected cross-site scripting XSS vulnerability in SAP NetWeaver JAVA JDBC Test Servlet, an unauthenticated attacker could craft a URL that embeds a malicious script. If a victim clicks this link, the injected input is processed during web page generation, resulting in the execution of...