15859 matches found
EUVD-2026-78136
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code...
CVE-2026-15634
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...
WebGoat v2026.3
WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...
CVE-2024-57609
Vulnerabilidad de Redirección Abierta en Kanaries Página del Proveedor: https://kanaries.net/ Video de Prueba de Concepto: https://drive.google.com/file/d/1kqfbmx1W6UgSs56gOLOsUFiGcvKrIyW9/view?usp=sharing Guía de Explotación Paso a Paso 1. Ir al Sitio Web Navegue al sitio web de Kanaries. 2...
CVE-2023-28148
A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...
eJPT-Prep-Guide
eJPT-Prep-Guide eJPT Junior Penetration Tester preparation a...
UBUNTU-CVE-2026-88058
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...
NetRecon
NetRecon 2.5 Authorization-first network reconnaissance a...
CVE-2026-12682
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319...
RamziRange3
🕶️ RamziRange9 A deliberately vulnerable web application bui...
EUVD-2025-210878
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
phpMyFAQ Auth Bypass
The vulnerability of the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-9765
A flaw was found in Grafana. This vulnerability, categorized as broken access control, allows an attacker to bypass security mechanisms in a web application. This can lead to unauthorized access to sensitive data, enable operations on behalf of other users, and potentially result in privilege...
CVE-2026-76961 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...
CVE-2026-86733: Improper Neutralization of Special Elements used in an OS Command
Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...
Apache OFBiz - Remote Code Execution
Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45195 info: name: Apache OFBiz -...
GHSA-JMR9-QJV8-65GV vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
SafeLine v9.4.1
SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...