CVE-2026-120656

OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any pod on the cluster network...

CVE-2026-120656

The OpenKruise kruise-manager component exposes an unauthenticated ppof endpoint on 0.0.0.0:8090 when the feature is enabled. This configuration flaw allows any RBAC pod to trigger a Denial of Service (DoS) attack. Remediation is associated with the release available in the provided references.

CVE-2026-120656 CVE-2026-120656

OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any pod on the cluster network...

CVE-2026-120656: OpenKruise kruise-manager: OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090,…

OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can enable a DoS attack triggerable by any pod on the cluster network...

CVE-2024-51378

CVE-2024-51378 Analysis of the CVE-2024-51378 vulnerability, scripts for searching vulnerable hosts, using the exploit in single-threaded and multi-threaded mode in Python and nuclei. The use of scripts is allowed only for educational purposes on test hosts. 1-CVE-2024-51378.pdf - main file with ...

CVE-2020-1938

cve-2020-1938 1.read file： python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...

CVE-2026-52102-PoC

CVE-2026-52102 - Exploit PoC A Proof of Concept PoC demonstrating CVE-2026-52102. Usage python3 CVE-2026-52102-PoC.py Targets Add one target per line to the targets.txt file. Note: Only include systems that you own or have explicit authorization to test. Example: https://example.local:8090...

CVE-2017-18349

Lab 6-CVE-2017-18349 I. SYSTEM ANALYSIS Attack Surface Identification Let's start with what is running in the environment. I list all active containers: docker ps The victim exposes only a single port:8090 Currently, I am not yet fully clear on the target. From the docker ps results, the system...

CVE-2019-13956

CVE-2019-13956 cd CVE-2019-13956 docker-compose up -d http://127.0.0.1:8090...

JuggleIM Trust Management Vulnerability

JuggleIM versions 1.8.16 and earlier have a vulnerability related to trust management. This vulnerability stems from the default administrator credentials “admin/123456” included in the system. Unauthenticated remote attackers can access the management console via port 8090 and log in as an...

Deep Sea Electronics DSE 855 Generator Controller - Detect

Deep Sea Electronics DSE 855 is a generator/mains automatic transfer switch ATS controller with a built-in HTTP web server for remote monitoring and configuration of generator control systems. The interface is commonly exposed on port 8090 and requires no authentication by default. !/usr/bin/env...

MiracleLinux 9 : firefox-140.10.2-1.el9_8.ML.1 (AXSA:2026-1283:16)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1283:16 advisory. firefox: Other issue in the WebRTC component CVE-2026-8094 firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firef...

CVE-2026-22095

The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection...

CVE-2026-22096

The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...

CVE-2026-22103

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...

CVE-2026-22103 Command injection in NPC start web endpoint

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...

CVE-2026-22103 Command injection in NPC start web endpoint

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...

CVE-2026-22103

CVE-2026-22103 : The NPC start endpoint on the web server listening at port 8090 is vulnerable to command injection. The public CVSS v4.0 metrics indicate a base score of 9.3 (CRITICAL) with network attack vector, low attack complexity, no privileges required, and no user interaction. Impacts are...

EUVD-2026-43333

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...

EUVD-2026-43328

The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...