Skip to content
OpenAdvisories

Vendor

zedeus

1 known vulnerabilities.

Products

nitter 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-56285

    Nitter - Server-Side Request Forgery in /video Media Proxy Endpoint

    Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded default HMAC key, allowing unauthenticated attackers to compute valid HMACs for arbitrary URLs. Attackers can retrieve HTTP responses from any ho…

    zedeus nitter