gitea-CVE-2026-28699

CVE-2026-28699: Gitea OAuth2 Scope Bypass via HTTP Basic Auth A Gitea OAuth2 access token scoped to only read:user can perform full write actions when it is sent as Authorization: Basic base64:x-oauth-basic instead of as a Bearer token. The scope check is skipped for any token presented over Basi...

BadHost-CVE-2026-48710-Exploit

BadHost — CVE-2026-48710 Scanner Detection-only scanner for the BadHost auth-bypass in Starlette / FastAPI — where auth middleware reads request.url.path instead of request.scope"path", allowing a crafted Host header to smuggle an allowlisted path and bypass authentication. root@kitploit: GET...

Moderate: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in...

PT-2026-91214

LangBot's plugin runtime pip package langbot plugin through 0.4.17 starts a debug WebSocket server on 0.0.0.0:5401 /plugin/ws whose authentication is gated on plugin debug key, which defaults to an empty string and is never set by the upstream repository, Docker image, or docker-compose which...

ALSA-2026:67145 Moderate: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in...

AlmaLinux 8 : gstreamer1-plugins-base (ALSA-2026:67145)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67145 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

PT-2026-91237

Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and returned the result without redaction in the topology conf field of TopologyPageInfo. The Storm UI copied that value verbatim into the configuration field of GET /api/v1/topology/id an...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow Pre-auth RCE CVE-2025-0282 Этот код намеренно сломан нетривиальным образом и потребует усилий для работы, как было описано ранее в нашем блоге о методике эксплуатации. Чтобы понять эту уязвимость, вы можете ознакомиться с нашим технически...

CVE-2026-58231

Script de détection CVE-2026-58231 Outil de détection et de vérification des conditions préalables pour CVE-2026-58231 — autorisation inappropriée dans le composant Data Hub Adapter de SAP Commerce Cloud CVSS 10.0. Le script effectue uniquement des vérifications non destructives. Il n'inclut ni...

mikrotrick-poc

PoC de laboratoire MikroTrick — CVE-2026-67276 contournement de l'authentification par clé publique SSH de RouterOS Usage en laboratoire uniquement. À exécuter exclusivement contre des instances RouterOS que vous possédez. Attaquer des appareils que vous ne possédez pas est un crime CFAA, art. 26...

Jozini-network-scanner

Jozini Network Scanner Construit le 2026-09-05 à la bibliothèque KwaQondile, Jozini KZN, en utilisant Termux sur Android Ce que j'ai construit scanner.py - Scanner de ports avec récupération de bannières 20 ports + enregistrement automatique du rapport cvecheck.py - Mappe la version RouterOS aux...

Metabase-Pre-Auth-RCE-POC

CVE-2023-38646 — Preuve de concept d'exécution de code à distance RCE sur Metabase Vue d'ensemble Ce dépôt documente un projet de recherche en sécurité de type preuve de concept PoC analysant CVE-2023-38646 , une vulnérabilité critique d'exécution de code à distance RCE avant authentification...

phpBB-CVE-2026-48611

À UTILISER À VOS PROPRES RISQUES. Cet outil est fourni strictement pour la recherche en sécurité autorisée, les tests d'intrusion et à des fins éducatives. Ne l'exécutez que contre des systèmes que vous possédez ou pour lesquels vous disposez d'une autorisation écrite explicite. L'auteur n'est pa...

PoC-CVE-2025-55182

PoC: CVE-2026-33017 Une vulnérabilité d'exécution de code à distance avant authentification existe dans les versions 19.0.0, 19.1.0, 19.1.1 et 19.2.0 des composants serveur React, incluant les paquets suivants : react-server-dom-parcel, react-server-dom-turbopack et react-server-dom-webpack. Le...

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804 : Exécution de commande à distance RCE sur Bitbucket Analyse technique et exploitation en laboratoire de l'injection d'arguments par octet nul Résumé de la vulnérabilité CVE-2022-36804 est une vulnérabilité d'injection d'arguments de criticité élevée/critique dans l'API REST...

CVE-2026-90579

A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function authorizehttpkey of the file core/cat/factory/customauthhandler.py. The manipulation of the argument userid leads to missing authentication. The attack may be initiated remotely. The exploit h...

CVE-2025-1739

CVE-2025-1738 & CVE-2025-1739 — PoC Caméra Trivision NC227WF 📋 Aperçu CVE| CVSS v3.1| Score| CWE| Type ---|---|---|---|--- CVE-2025-1739| AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N| 7.1| CWE-288| Contournement d'authentification par fuite d'authentification Basic 🔓 CVE-2025-1739 — Exposition du code...

CVE-2026-90579

CVE-2026-90579 affects Cheshire Cat AI up to version 1.9.2 . The flaw resides in the _authorize_http_key function within core/cat/factory/custom_auth_handler.py, where manipulation of the user_id argument leads to missing authentication . An unauthenticated remote attacker can exploit this over t...

EUVD-2026-77064

A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function authorizehttpkey of the file core/cat/factory/customauthhandler.py. The manipulation of the argument userid leads to missing authentication. The attack may be initiated remotely. The exploit h...

CVE-2026-90579 cheshire-cat-ai Cheshire Cat AI custom_auth_handler.py _authorize_http_key missing authentication

A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function authorizehttpkey of the file core/cat/factory/customauthhandler.py. The manipulation of the argument userid leads to missing authentication. The attack may be initiated remotely. The exploit h...