CVE-2026-100859: Server-Side Request Forgery (SSRF)

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

CVE-2026-100862: Cleartext Storage of Sensitive Information

heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...

CVE-2026-100869: Incorrect Authorization

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2026-101050: Improper Authentication

Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credentialid is absent or secrettoken is empty. Remote unauthenticated attackers can post forged Telegram updates to trigger workflows with the owner's configured credentials and execu...

CVE-2026-101085: Numeric Truncation Error

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...

CVE-2026-100851: Exposure of Sensitive Information to an Unauthorized Actor

AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/id/vue/profile endpoint that allows authenticated users with only View Station Page permission to read Icecast/Shoutcast admin, source, and relay passwords. Attackers with View-only access can call this...

CVE-2026-100871: Improper Authentication

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers can register a shop customer account using an administrator's email address and obtain a token that the Admin API...

CVE-2026-101061: Server-Side Request Forgery (SSRF)

utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugi...

CVE-2026-101088: Time-of-check Time-of-use (TOCTOU) Race Condition

Nezha is a server and website monitoring tool. In versions = 2.2.11 and 2.3.1, the service sentinel worker service/singleton/servicesentinel.go contains an incomplete fix for a previously reported nil dereference denial of service GHSA-qjpp-gffx-2wm9. The 2026-07-21 fix re-validated the service...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Description pocwptot.py is a proof‑of‑concept PoC to exploit a time‑based blind SQL injection vulnerability on the WordPress REST API batch endpoint, and perform an escalation chain up to Remote Code Execution RCE...

westone-CVE-2021-37580-scanner

westone-CVE-2021-37580-scanner Apache Shenyu is an extensible, high-performance and responsive API gateway solution applied to all micro service scenarios. An authentication bypass vulnerability exists in Apache Shenyu admin. The improper use of JWT in Shenyu admin bootstrap allows an attacker to...

CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mezcla datos de plantilla pura con opciones de configuración del motor a través de la API de renderizado de Express. Al sobrescribir opciones de configuración interna, se puede desencadenar ejecución remota de código en aplicaciones posteriores. Fuente...

CVE-2026-13447

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-13447 CVE-2026-13447 — WordPress WordPress — MStore API 4.18.4 — inspireui The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing...

CVE-2025-44823

Exposición autenticada de claves API en Nagios Log Server 2024R1.3.1 ▶️ Demostración del PoC CVE ID: CVE-2025-44823 Fecha: 2025-04-02 Autores: Alex Tisdale, Seth Kraft Página web del proveedor: https://www.nagios.com/ Registro de cambios del proveedor: https://www.nagios.com/changelog/log-server...

CVE-2023-23752

CVE-2023-23752 — Joomla! ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details How It Work...

westone-CVE-2021-45232-scanner

westone-CVE-2021-45232-scanner Las versiones anteriores del panel de Apache APISIX 2.10.1 tienen una vulnerabilidad de seguridad en el acceso no autorizado. La API de Manager utiliza dos frameworks e introduce el framework droplet sobre la base del framework gin, todas las API y el middleware de...

Exploit for Interpretation Conflict in Wordpress

LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CV...

vt-go

vt-go Esta es la biblioteca cliente oficial de Go para VirusTotal. Con esta biblioteca puedes interactuar con la API REST v3 de VirusTotal sin tener que enviar solicitudes HTTP simples con el paquete estándar "http". Ejemplo de uso package main import "flag" "fmt" "log" "os" vt...

vt-py

vt-py This is the official Python client library for VirusTotal. With this library you can interact with the VirusTotal REST API v3 and automate your workflow quickly and efficiently. Things you can do with vt-py Scan files and URLs Get information about files, URLs, domains, etc Perform VirusTot...

MLflow-Vuln

Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf MLflow-Vulnerabilidad Vulnerabilidad MLflow LFI/RFI - CVE-2023-1177 - Reproducida Una de las herramientas más populares en un sistema de ML es MLflow, que se utiliza para gestionar el ciclo de vida completo del aprendizaje automático. Probé la...