Metabase CVE-2023-38646 Detect

Checks /api/session/properties for leaked setup-token pre-auth RCE chain. !/usr/bin/env python3 -- coding: utf-8 -- """Metabase CVE-2023-38646 setup-token / H2 validate surface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Exploit for SQL Injection in Metabase

CVE-2026-72898 — Metabase unauthenticated SQL injection Indep...

CVE-2026-108737

Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bind tokens to a purpose. Attackers holding a leaked reset link can obtain a full session via /api/session or change...

CVE-2026-108738

Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into attacker-controlled accounts because the OpenID Connect callback never validates the OAuth state parameter. Attackers can induce a victim's browser to load...

CVE-2026-108737 Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusion

Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bind tokens to a purpose. Attackers holding a leaked reset link can obtain a full session via /api/session or change...

EUVD-2026-96903

Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bind tokens to a purpose. Attackers holding a leaked reset link can obtain a full session via /api/session or change...

CVE-2026-108737

Versions of Traccar through 6.16.0 are vulnerable to a weak password recovery flaw due to token purpose confusion in the TokenManager component. Because the system fails to bind tokens to a specific purpose, an attacker who obtains a leaked password reset link can reuse that token to establish a ...

PT-2026-110141

Name of the Vulnerable Software and Affected Versions Traccar versions 5.7 through 6.16.0 Description A cross-site request forgery issue exists where the OpenID Connect callback fails to validate the OAuth state parameter. This allows an attacker to force a victim to log into an account controlle...

CVE-2026-108737: Weak Password Recovery Mechanism for Forgotten Password

Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bind tokens to a purpose. Attackers holding a leaked reset link can obtain a full session via /api/session or change...

Exploit for CVE-2026-76504

Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Unauthenticate...

CVE-2026-101891: Improper Access Control

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

PT-2026-99936

Name of the Vulnerable Software and Affected Versions WatchGuard Access Points affected versions not specified Description An improper access control issue exists within an internal API service. This allows an unauthenticated attacker with network access to the access point to obtain a valid API...

Malicious code in js-soul (npm)

Source: amazon-inspector 3e5bb2e2d2011a8e8bcc3c0fba8aeed7cca1e1b92e19ea867535a27dbf2cc500 On module load, src/api/session-api.js reads../../../../public/logo.ico a path outside the package, DES-decrypts the contents with the hardcoded key 'bf497c0b9cee', spawns a detached node child process via...

Malicious code in mham-js (npm)

Source: amazon-inspector f0dc3c71ee333b190e3e7202f7a222b4fe242fd50974cda9ec122b4200bd5f4f On import of mham-js, src/api/session-api.js runs top-level code that reads a file outside the package tree at../../../../public/logo.ico, decrypts its contents with CryptoJS.DES using the hardcoded password...

Metabase reset_password SQLi Admin Takeover (GHSA-vwf4-m7j8-wcjf)

GHSA-vwf4-m7j8-wcjf in Metabase = v0.58.0 before the x.58.24 / x.59.21 / x.60.17 / x.61.11 / x.62.9 / x.63.5 patches: pre-authentication SQL injection in POST /api/session/resetpassword via HoneySQL raw-map in the user-id JSON key. On all backends, injecting a subquery that resolves to the admin...

Metabase reset_password SQLi (GHSA-vwf4-m7j8-wcjf)

Detects Metabase = v0.58.0 before x.58.24 / x.59.21 / x.60.17 / x.61.11 / x.62.9 / x.63.5 affected by GHSA-vwf4-m7j8-wcjf: pre-authentication SQL injection in POST /api/session/resetpassword via HoneySQL raw-map in the user-id JSON key mass parameter pollution. !/usr/bin/env python3 -- coding:...

CVE-2026-14227

An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Session Expiration vulnerability. This could allow active sessions to retain their previous permission set after inactivity timeouts or user‑group changes. As a result, an...

ChatGPT Web - Unauthorized Access Detection

ChatGPT Web is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """ChatGPT Web is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ChatGPT Web - Unauthorized Access Detection', 'description': 'ChatGPT Web i...

CVE-2026-58174

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174: Incorrect Permission Assignment for Critical Resource

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...