mongobleed

mongobleed CVE-2025-14847 - Explotación de fuga de memoria no autenticada en MongoDB Un exploit de prueba de concepto para la vulnerabilidad de descompresión zlib de MongoDB que permite a atacantes no autenticados filtrar memoria sensible del servidor. Vulnerabilidad Un fallo en la descompresión...

pyghidra-mcp

PyGhidra-MCP - Servidor del Protocolo de Contexto de Modelo para Ghidra Descripción general pyghidra-mcp es un servidor de línea de comandos del Protocolo de Contexto de Modelo MCP que lleva todo el poder analítico de Ghidra, una robusta suite de ingeniería inversa de software SRE, al mundo de lo...

Exploit for Deserialization of Untrusted Data in Facebook React

Reactor es una máquina Linux fácil centrada en ReactorWatch, un...

reproxy

Reproxy es un servidor/proxy inverso simple de borde HTTPs que admite varios proveedores docker, estático, archivo, catálogo consul. Uno o más proveedores suministran información sobre el servidor solicitado, la URL solicitada, la URL de destino y la URL de verificación de salud. Se distribuye co...

stunner

STUNNER Stunner es una herramienta para probar y explotar servidores STUN, TURN y TURN sobre TCP. TURN es un protocolo usado principalmente en videoconferencias y chats de audio WebRTC. Si encuentras un servidor mal configurado, puedes usar esta herramienta para abrir un proxy socks local que...

interactsh

Un servidor de recopilación de interacciones OOB y biblioteca cliente Características • Uso • Cliente Interactsh • Servidor Interactsh • Integración de Interactsh • Únete a Discord Interactsh es una herramienta de código abierto para detectar interacciones fuera de banda. Es una herramienta...

jarm

JARM Por favor, lee la publicación inicial del blog sobre JARM para más información. JARM es una herramienta activa de huellas digitales de servidores de seguridad de la capa de transporte TLS. Las huellas digitales de JARM se pueden usar para: Verificar rápidamente que todos los servidores de un...

CVE-2026-108851

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

EUVD-2026-97016

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never authenticates a resource owner. Attackers can register a client, request a code from /authorize, and exchange it at /toke...

EUVD-2026-97007

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP server UUID with appType mcpserver can open MCP sessions and invoke the...

CVE-2026-108851

The phpMyFAQ application (through version 4.1.10 ) is vulnerable to a missing authorization flaw in the MCP server faq_search tool . The root cause is that the Search::searchDatabase() function fails to apply necessary user or group permission checks. Consequently, an attacker connected to the ph...

EUVD-2026-97002

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

CVE-2026-108851 phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

CVE-2026-108851 phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

headscale

Una implementación de código abierto y autoalojada del servidor de control de Tailscale. Únete a nuestro servidor de Discord para conversar. Nota: Selecciona siempre la misma etiqueta de GitHub que la versión publicada que uses para asegurarte de tener la configuración de ejemplo correcta. La ram...

CVE-2026-108760

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset management API to read stored provider API key...

CVE-2026-108741

Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...

CVE-2026-108718

Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user consent. Attackers can register a client with the longlivedaccesstoken scope and lure a user to an authorization link,...

CVE-2026-108578

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but...

UBUNTU-CVE-2026-108735

Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed's proxyurl. Attackers can point proxyurl at loopback or internal hosts, bypassing FETCHERALLOWPRIVATENETWORKS checks to probe internal...