47 matches found
CVE-2026-23744-Lab
CVE-2026-23744 – MCPJam Inspector Docker Lab This repo is a tiny Docker lab to compare a vulnerable vs patched build of MCPJam Inspector for CVE-2026-23744. It’s meant for learning and for building a public security portfolio: quick setup, clear evidence, and screenshots. ⚠️ Ethics / scope : Only...
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
CVE-2026-23744-POC
CVE-2026-23744 — MCP Server Unauthenticated RCE Proof-of-Concept exploit byd3vn0mi Overview CVE-2026-23744 is an unauthenticated Remote Code Execution RCE vulnerability in MCP-compatible servers exposed on port 6274. The /api/mcp/connect endpoint accepts a serverConfig object that allows callers ...
CVE-2026-6274
creationtimestamp| type| source ---|---|--- 2026-06-05 10:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuy6cxuh2d 2026-06-05 10:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuy6cxuh2d 2026-06-05 10:30:31+00:00| seen|...
SUSE CVE-2014-6274
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2014-6274
creationtimestamp| type| source ---|---|--- 2025-06-27 00:49:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskg7rbr552s 2025-06-27 18:51:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19775...
CVE-2014-6274
A credential storage flaw was found in git-annex. In specific conditions, AWS credentials were stored in effective plaintext. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use an...
CVE-2014-6274
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2014-6274 S3 and Glacier remotes creds embedded in the git repo were not encrypted
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2014-6274 S3 and Glacier remotes creds embedded in the git repo were not encrypted
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2014-6274
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2025-6274
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...
CVE-2025-6274 WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...
CVE-2025-6274
CVE-2025-6274 affects WebAssembly wabt up to 1.0.37, specifically OnDataCount in src/interp/binary-reader-interp.cc. The issue is caused by input manipulation that leads to resource consumption, enabling a local attacker to trigger denial-of-service behavior. The exploit has been disclosed public...
CVE-2025-6274 WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...
CVE-2023-6274
A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/updatelib.php of the component PHP File Handler. The manipulation of the argument fileupload leads to unrestricted...
CVE-2024-6274
A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initia...
CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection
A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initia...
CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection
A vulnerability classified as critical has been found in lahirudanushka School Management System 1.0.0/1.0.1. This affects an unknown part of the file /attendancelist.php of the component Attendance Report Page. The manipulation of the argument aid leads to sql injection. It is possible to initia...
