Exploit Database

24 entries indexed

Cross-Site WebSocket Hijacking: How Attackers Exploit WebSocket Connections
WEB
Web App
High
Open eClass 3.15 - RCEEDB
CVE-2024-26503
WEB
Multiple
High
Keycloak 26.7.2 - Unauthenticated Account TakeoverEDB
CVE-2026-18963
WEB
Multiple
High
pizzafy-1.0 - SQLiEDB
WEB
Multiple
High
Exploiting Insecure Deserialization Vulnerabilities
CVE-2017-9805
WEB
Multiple
High
Understanding and Preventing Command Injection Attacks
WEB
Multiple
Critical
Path Traversal and Local File Inclusion (LFI) Exploitation and Defense
WEB
Web App
High
Subdomain Takeover: Hijacking Unclaimed Subdomains
WEB
Web App
High
HTTP Request Smuggling: Manipulating Intermediaries
WEB
Multiple
High
OAuth Token Theft via Open Redirect Exploitation
WEB
Web App
High
Prompt Injection Attacks Against Large Language Model Applications
WEB
Multiple
High
Understanding and Defending Against XML External Entity (XXE) Injection
CVE-2013-1635
WEB
Web App
High
Understanding and Preventing Clickjacking Attacks
WEB
Web App
Medium
JWT Algorithm Confusion Attack Explained and Prevented
WEB
Web App
High
Cache Deception Attack: Exploiting Web Cache Behavior
WEB
Web App
High
Server-Side Template Injection (SSTI) Explained and Mitigated
WEB
Web App
High
SQL Injection via Login Bypass
CVE-2023-XXXXX
WEB
Web App
Critical
Reflected Cross-Site Scripting (XSS)
WEB
Web App
High
Cross-Site Request Forgery (CSRF)
WEB
Web App
Medium
Linuxfabrik monitoring_plugins_6.0.0 - SSRFEDB
WEB
Multiple
High
Nodemailer 9.0.0 - File Read/ SSRFEDB
WEB
Multiple
High
flyto-core 2.26.7 - Arbitrary File WriteEDB
WEB
Multiple
High
Probo 0.222.2 - IDOREDB
CVE-2026-63505
WEB
Multiple
High
flyto_core 2.26.7 - Server-Side Request ForgeryEDB
WEB
Multiple
High