CVE-2026-101089 Nezha before 2.2.7 Information Disclosure via /api/v1/profile

Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints...

EUVD-2026-88023

Nezha is a server and website monitoring tool. In versions = 2.2.11 and 2.3.1, the service sentinel worker service/singleton/servicesentinel.go contains an incomplete fix for a previously reported nil dereference denial of service GHSA-qjpp-gffx-2wm9. The 2026-07-21 fix re-validated the service...

CVE-2026-101088 Nezha before 2.3.1 Denial of Service via Concurrent Server Delete

Nezha is a server and website monitoring tool. In versions = 2.2.11 and 2.3.1, the service sentinel worker service/singleton/servicesentinel.go contains an incomplete fix for a previously reported nil dereference denial of service GHSA-qjpp-gffx-2wm9. The 2026-07-21 fix re-validated the service...

EUVD-2026-88021

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...

CVE-2026-101086 Nezha Dashboard before 2.3.5 Task Type Validation Bypass

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...

CVE-2026-101086 Nezha Dashboard before 2.3.5 Task Type Validation Bypass

Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to...

EUVD-2026-88020

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...

CVE-2026-101085 Nezha before 2.3.8 Denial of Service via Alert Rule

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...

CVE-2026-101085 Nezha before 2.3.8 Denial of Service via Alert Rule

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...

CVE-2026-101085

Versions of Nezha before 2.3.8 are vulnerable to a Denial of Service (DoS) because the software fails to validate alert rule types and duration bounds. Authenticated non-administrator users can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint, triggering unrecovered panics in ...

CVE-2026-101063 Obot before v0.23.0 Authentication Bypass via Registry API

Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...

CVE-2026-101063 Obot before v0.23.0 Authentication Bypass via Registry API

Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...

CVE-2026-101063 Obot before v0.23.0 Authentication Bypass via Registry API

Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...

CVE-2026-101063

Obot versions prior to v0.23.0 contain an authentication bypass vulnerability in the MCP Registry endpoints under /v0.1/*. When registry authentication is enabled, the system fails to properly enforce it for these specific endpoints. This allows unauthenticated attackers to perform GET requests t...

CVE-2026-9830

CVE-2026-9830 PoC de Evaluación de la API de BookingPress Pro Este repositorio contiene una prueba de concepto en Python para validar una exposición no autenticada reportada en la API REST de BookingPress Pro. Una respuesta exitosa puede contener información de reservas y clientes, que puede...

CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform RCE no autenticada CVSS 10.0 CVSS 10.0 Crítico · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck Resumen Minds Platform el backend de código abierto de mindsdb/mindshub, anteriormente mindsdb/minds-platform expone POST /api/v1/responses/ una API de...

flar3ad

flar3ad es una herramienta que aprovecha el CVE-2026-51031 para leer archivos de un servidor objetivo utilizando el endpoint /v1 de la API de FlareSolverr y usando la función driver.get para explotar la vulnerabilidad. Explicado con más detalle en el blog de xinyi. Instalación git clone...

gitread

gitread PoC para CVE-2026-85706, una lectura arbitraria de archivos sin autenticación que afecta a GitLab CE/EE autogestionado. | ---|--- CVE| CVE-2026-85706 CVSS| 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Afectado| 18.7 a 19.1.7, 19.2.0 a 19.2.5, 19.3.0 a 19.3.1 Corregido| 19.1.8 / 19.2.6 / 19.3....

CVE-2026-78906-ChatGPT-Prompt-Injection

CVE-2026-78906 — PromptGhost API de ChatGPT — Inyección de Prompts y Exfiltración de Memoria Campo| Valor ---|--- Severidad| 8.7 Alta Vector| Red Versiones Afectadas| API v1.0 – v1.3 Descubierto Por| 𝕍𝕠𝕤𝕤🥷 Descripción Una vulnerabilidad crítica en la API de ChatGPT de OpenAI permite a un atacante...

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804: Bitbucket Remote Command Execution RCE Technical Analysis & Laboratory Exploitation of Null-Byte Argument Injection Vulnerability Summary CVE-2022-36804 is a high/critical Argument Injection vulnerability within the REST API of Atlassian Bitbucket Server and Data Center. While the...