CVE-2026-51876

DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow. An unauthenticated or unauthorized caller can reuse a publicly exposed bookid to submit a confirm-proposal request for an existing book, causing unauthorized overwrites of persisted metadata and spine...

CVE-2026-104051

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret deletecode and uploader metadata by calling the API::info endpoint which returns the complete raw metadata object without a field whitelist. Attackers can use the...

MetadataPlus

MetadataPlus V.1.0 - Chris Nevin @ NCCGroup A tool to extract metadata from Microsoft Office files that includes new locations not checked in other tools. Example Usage: Run on compatible documents in the directory it is in: MetaDataPlus.exe Specify input folder: MetaDataPlus.exe -i=c:\Docs Run o...

CVE-2026-100251

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

EUVD-2026-91032

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

CVE-2026-100251

Versions of Wormhole.app deployed before 2026-08-22 are vulnerable to a server-side request forgery (SSRF) due to a misconfiguration in the coturn TURN server . The flaw arises because the application fails to properly restrict TCP relay peers , enabling an unauthenticated attacker to access inst...

vault-cve-2026-5006-audit

CVE-2026-5006 toolkit HCSEC-2026-32 Two tools for working through the Vault templated-policy slash-injection vulnerability: an interactive walkthrough for explaining and scoping the issue, and an audit script that checks a live cluster and writes the findings to Markdown...

CVE-2026-104056

Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery response to replace all endpoint values with attacker-controlled values rather than endpoint URLs that share the origin of...

CVE-2026-89274-wp-recipe-maker-poc

CVE-2026-89274 - Laboratorio de Validación de Ejecución Arbitraria de Shortcodes en WP Recipe Maker Material de investigación de seguridad para reproducir y validar CVE-2026-89274 : WP Recipe Maker Úsese únicamente en sistemas propios o para los que se tenga autorización explícita de prueba. El P...

CVE-2026-88997

CVE-2026-88997 JSM Show Post Metadata 4.9.1 — XSS Almacenado con Contributor+ a través de Custom Field Meta Key | ---|--- ID de CVE| CVE-2026-88997 Estado| PUBLICADO CNA| WPScan Publicado| 2026-09-23 Actualizado| 2026-09-23 CWE| CWE-79: Cross-Site Scripting XSS Descripción El plugin de WordPress...

CVE-2026-34160

CVE-2026-34160 — Unauthenticated SSRF in Chamilo LMS via PENS plugin pens.php Severity : High CVSS 8.6 CWE : CWE-918 Server-Side Request Forgery Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-g2xj-4cch-j276 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34160 Credit ...

CVE-2026-33752

CVE-2026-33752 CVE-2026-33752Redirect-based SSRF leading to internal network access in curlcffi Summary curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to...

CVE-2026-78577

Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated attacker on the same local network can invoke the scan action and retrieve nearby wireless access-point metadata, including SSIDs, BSSIDs,...

poc-cve-2026-32255

Kan SSRF via Attachment Download CVE-2026-32255 - Proof of Concept This repository contains a proof of concept POC for CVE-2026-32255 , a high-severity Server-Side Request Forgery SSRF vulnerability in Kan , an open-source project management tool. The vulnerable endpoint allows unauthenticated...

CVE-2021-2175

Proof of Concept is published here: https://databasesecurityninja.wordpress.com/2022/02/02/cve-2021-2175-database-vault-metadata-exposure-vulnerability/...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Security Detection Tool This is an Apache ActiveMQ Classic exposure detection tool for defense and internal network reconnaissance, used to assist in assessing risks related to CVE-2026-34197. This project does not contain exploit code, does not execute Jolokia exe...

CVE-2026-104056

The Authlib library (version 1.7.2 and below) is vulnerable to a flaw where OpenID Connect (OIDC) and OAuth discovery metadata are cached without validation or issuer-origin binding. A remote attacker providing a malicious discovery response can replace legitimate service endpoints with attacker-...

EUVD-2026-91003

Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery response to replace all endpoint values with attacker-controlled values rather than endpoint URLs that share the origin of...

EUVD-2026-90981

Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated attacker on the same local network can invoke the scan action and retrieve nearby wireless access-point metadata, including SSIDs, BSSIDs,...

CVE-2026-78577

The Tapo C120 v1 and C200 V5 security cameras are vulnerable to an information disclosure flaw in the HTTPS onboarding scan function . Due to missing authentication , an unauthenticated attacker residing on the same local network can trigger the scan to retrieve metadata from nearby wireless acce...