CVE-2026-39987_POC

PoC — CVE-2026-39987 · Marimo Pre-Auth RCE CVSS 4.0: 9.3 Critical · AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H Затрагивает: marimo 2 вызова validateauth. terminal.py - 0 @requires, 0 validateauth. -- уязвимость. Промежуточное ПО AuthBackend защищает HTTP и WebSocket /ws, но /terminal/ws принимает...

gori

Взлом из терминала. Установка • Использование • Документация • Участие gori 고리 — по-корейски кольцо, звено, петля находится в петле между вашим клиентом и его целью, перехватывая каждый запрос и ответ как поток , который можно воспроизводить, фаззить и сканировать по HTTP/1.1, HTTP/2, WebSocket,...

CVE-2026-39987-Poc

CVE-2026-39987-Poc WebSocket-клиент PoC для CVE-2026-39987 Marimo Pre-Auth RCE, предназначенный для авторизованного тестирования безопасности. ⚠️ Отказ от ответственности Этот скрипт/инструмент предоставляется исключительно для образовательных, исследовательских целей и авторизованного...

CVE-2026-15409

🚀 CVE-2026-15409 – SonicWall SMA 1000 Erlang RCE через WebSocket-прокси Эксплойт Proof-of-Concept для CVE-2026-15409 – неаутентифицированное удалённое выполнение кода на устройствах серии SonicWall SMA 1000 через протокол распределения Erlang, туннелируемый через WebSocket. 📖 Обзор CVE-2026-15409...

CVE-2026-83745

A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service DoS against the Node.js and D WebSocket server transports by sending a frame specifying an excessively large payload length. Because the server immediately allocates the declared amount of memory without verifying...

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

AZL-105953 CVE-2026-83745 affecting package thrift 0.24.0-1

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-92834

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

AZL-105422 CVE-2026-92834 affecting package thrift 0.24.0-1

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91580

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-83745 Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-83745

A vulnerability exists in Apache Thrift before version 0.25.0 affecting the Node.js and D lang bindings. The issue stems from WebSocket server transports reading the payload length from the frame header and immediately allocating that memory without verifying if the bytes have actually arrived. T...

CVE-2026-83745 Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-92834 Apache Thrift: C++ WebSocket server transport does not read a full request length

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91559

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-92834

The Apache Thrift C++ WebSocket server is vulnerable to a use of uninitialized resource and the return of a wrong status code . The root cause is that the C++ WebSocket server transport fails to read a full request length. This issue affects versions before 0.25.0 . To remediate this vulnerabilit...

CVE-2026-96294 Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

sagemcom-fast-3890-exploit

Эксплойт Sagemcom Fast 3890 Этот эксплойт использует уязвимость Cable Haunt для получения шелла на кабельном модеме Sagemcom F@ST 3890 50.10.19 при доступе из локальной сети. Версия прошивки 50.10.21 или новее должна быть защищена от Cable Haunt. Эта proof-of-concept специально разработана для...

peeko

peeko Версия: v1.1 peeko — это браузерный C2 Command and Control инструмент на основе XSS, который использует браузер жертвы в качестве скрытого прокси внутри внутренних сетей. Через внедрённый XSS-пейлоад peeko устанавливает WebSocket-соединение с центральным сервером, позволяя атакующему удалён...

CVE-2026-1961-foreman-poc

Foreman WebSocket Proxy Command Injection CVE-2026-1961 — PoC Proof-of-concept for a command injection vulnerability in Foreman's WebSocket proxy lib/wsproxy.rb, disclosed responsibly to Red Hat and patched. Summary Foreman's WebSocket proxy interpolates an unsanitized host value, sourced from a...