CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

EUVD-2026-92852

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2026-105761

The open-source LLM app development platform Dify contains an Insecure Direct Object Reference (IDOR) vulnerability in versions prior to 1.16.0 . The root cause is located in api/controllers/console/app/mcp_server.py, where the PUT /console/api/apps//server endpoint uses AppMCPServerController.pu...

CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2022-3172

عرض CVE-2022-3172 تشغيل poc.sh لإنشاء الموارد chmod +x poc.sh ./poc.sh استخدام Curl curl https://kubernetes.default.svc/apis/metrics.k8s.io/v2beta1/ -k -H "Authorization: Bearer token"...

VulnerableSpringDataRest

असुरक्षित Spring DataRest ऐप यह एक जानबूझकर बनाया गया Spring Data REST एप्लिकेशन है जो CVE-2017-8046 कमजोरी और REST APIs के माध्यम से Command Injection और Remote Code Execution के परीक्षण की चुनौतियों का परीक्षण और प्रदर्शन करने के लिए है। इसमें Swagger UI के लिए समर्थन है जिसका उपयोग उन उपकरणों ...

EUVD-2026-91120

Langflow: Title Authenticated Remote Code Execution in validatecode via Malicious Decorators Description...

github.com/grafana/grafana: Grafana: Information disclosure via alert rules list API

A flaw was found in Grafana. An authenticated user can query the alert rules list Application Programming Interface API to access alert rules stored in restricted folders they lack permission to read. When access restrictions are evaluated and a user has no readable folders, folder filtering is...

grafana: grafana: Dashboard modification lockout via forged file-provisioning metadata

A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing...

grafana: grafana: Dashboard modification lockout via forged file-provisioning metadata

A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing...

github.com/grafana/grafana: Grafana: Information disclosure via alert rules list API

A flaw was found in Grafana. An authenticated user can query the alert rules list Application Programming Interface API to access alert rules stored in restricted folders they lack permission to read. When access restrictions are evaluated and a user has no readable folders, folder filtering is...

CVE-2025-81110-PoC

CVE-2025-81110-PoC Gogs में PutContents API में अनुचित Symbolic link हैंडलिंग से कोड का स्थानीय निष्पादन संभव है। इस रिपॉजिटरी में Gogs के 0.13.0 से पहले के संस्करणों में एक गंभीर कमज़ोरी के लिए पेशेवर-स्तर का एक्सप्लॉइट शामिल है। यह एक्सप्लॉइट एक तार्किक त्रुटि का लाभ उठाता है जहां Gogs API...

CVE-2025-9074

CVE-2025-9074 – Docker Desktop ويندوز: كتابة من الحاوية إلى المضيف عبر واجهة برمجة تطبيقات المحرك المكشوفة المؤلف: w01f الحالة: إثبات المفهوم تعليمي / للاختبار المصرّح به فقط نظرة عامة يعرض هذا المشروع نموذجًا لإثبات المفهوم PoC لثغرة CVE-2025-9074 ، وهي سوء تكوين/تعريض في إصدارات معينة من Docker...

CVE-2026-11991-Exploit

CVE-2026-11991 — نشر النماذج غير المصرح به في FlowForms تجاوز التفويض مساهم+ لنشر أي نموذج مسودة في FlowForms ≤ 1.1.1 نظرة عامة على الثغرة الخاصية| القيمة ---|--- معرف CVE| CVE-2026-11991 درجة CVSS| 6.2 — متوسطة متجه CVSS| AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:H/RL:O/RC:C CWE| CWE-639 تجاوز التفو...

CVE-2026-105698

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/flowid/vertices and POST /api/v1/build/flowid/vertices/vertexid handlers. Through version 1.7.1, an unauthenticated...

CVE-2026-105697

Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...

CVE-2026-105444

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

CVE-2026-105447

A flaw was found in Quay. When handling build trigger requests, the application incorrectly exposes trigger configuration details containing repository write tokens to global read-only administrative users. An authenticated user with read-only privileges can exploit this flaw by querying the buil...

CVE-2026-105444 dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...