Langflow <= 1.0.12 - Remote Code Execution

Langflow 0.6.19 contains a remote code execution caused by accepting untrusted Python scripts in the /api/v1/customcomponent endpoint, letting remote attackers execute arbitrary code, exploit requires access to the endpoint and untrusted script input. id: CVE-2024-37014 info: name: Langflow =...

CodeChecker <= 6.24.1 - Authentication Bypass

Authentication bypass occurs when the API URL ends with Authentication, Configuration or ServerInfo. This bypass allows superuser access to all API endpoints other than Authentication. These endpoints include the ability to add, edit, and remove products, among others. id: CVE-2024-10081 info:...

Zoho ManageEngine OpManager - SQL Injection

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...

NestJS DevTools Integration - Remote Code Execution

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...

Apache Solr - Deserialization of Untrusted Data

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side. id:...

Apache Kylin - Exposed Configuration File

Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha have one REST API which exposed Kylin's configuration information without...

LearnPress < 4.2.7.1 - SQL Injection

The LearnPress - WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'conlyfields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of...

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

vBulletin replaceAdTemplate - Remote Code Execution

vBulletin versions 5.0.0 through 6.0.3 contain a Remote Code Execution RCE vulnerability in the ajax/api/ad/replaceAdTemplate endpoint. This flaw arises from improper use of PHP's Reflection API, allowing unauthenticated attackers to invoke protected controller methods. By injecting a crafted...

Anyscale Ray - Remote Code Execution

Anyscale Ray 2.6.3 and 2.8.0 contain a remote code execution vulnerability due to insecure job submission API, allowing attackers to execute arbitrary code remotely if they have network access to the Ray Dashboard API. id: CVE-2023-48022 info: name: Anyscale Ray - Remote Code Execution author:...

Gogs <= 0.13.3 - Remote Code Execution

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

burp-cc-bridge

CC-Bridge Burp SuiteMontoya API 확장 프로그램으로, Burp의 가장 유용한 원시 기능들을 로컬호스트 HTTP API로 노출하여 에이전트 코딩 셸Claude Code, OpenAI Codex 등이 curl로 Burp를 제어할 수 있게 합니다. Burp Community에서 작동합니다. 다운로드 최신 릴리스 JAR을 받으세요 — 클론이나 빌드가 필요 없습니다: →cc-bridge-0.1.0.jar 381 KB ·...

CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti

TREX-MESアプリケーションにおけるSQLi脆弱性（CVE-2026-18782） 概要 TREX MESは、製造現場からデータを収集・管理するために使用される商用の製造実行システム（MES）/ Industry 4.0プラットフォームです。アプリケーションのWeb APIは、クライアントから送信されたsql パラメータをバックエンドのMicrosoft SQL Server上で直接実行し、結果セットをJSONとして返します。 影響 低権限の認証済みユーザー — または以下に説明する認証回避によってセッショントークンを取得した任意の攻撃者 — は、次のことが可能です： SQL...

CVE-2026-18783-TREX-MES-Uygulamalarinda-Yetkisiz-Nesne-Erisimi

TREX-MESアプリケーションにおける未認可オブジェクトアクセス CVE-2026-18783 概要 TREX MESは、製造現場からデータを収集・管理するために使用される商用の製造実行システム MES / インダストリー4.0プラットフォームです。調査の結果、/api/GetDataJSON3 APIエンドポイントに送信されたリクエストが、有効なAuthorization: Bearerトークン情報がなくても正常に処理されることが確認されました。このエンドポイントは、トークンを含まないリクエストを401 Unauthorizedまたは403...

EUVD-2026-91857

Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard API handlers lacking visibility filters. Attackers can supply a known or guessed monitor tag to endpoints such as...

EUVD-2026-91832

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints...

EUVD-2026-91822

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

CVE-2026-49772

The Events Calendar SQL 인젝션 CVE-2026-49772 PoC 설명 CVE-2026-49772는 WordPress 플러그인 The Events Calendar 의 인증되지 않은 블라인드 SQL 인젝션 입니다. 손상된 REST 매개변수 검증기validatecallback이 검증 대신 클로저를 반환로 인해 실험적 tec/v1 REST API의 order 매개변수가 SQL ORDER BY 절에 검증되지 않은 채 도달합니다: GET /wp-json/tec/v1/events?orderby=eventdate&orde...

Linux Distros Unpatched Vulnerability : CVE-2026-103885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core...