Skip to content
OpenAdvisories

Vendor

benbusby

4 known vulnerabilities.

Products

whoogle-search 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-22205

    Whoogle Search Server Side Request Forgery vulnerability

    Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location` variable and passes it to the `send` method which sends a `GET` request on lines 339-343 in `reques…

    benbusby whoogle-search whoogle-search PyPI
  • Critical 9.1
    CVE-2024-22203 Public exploit

    Whoogle Search Server Side Request Forgery vulnerability

    Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and passes them to the `send` method which sends a GET request …

    benbusby whoogle-search whoogle-search PyPI