ipChecker

ipChecker Tool to check if a given IP is a node tor or an open proxy. Why? Sometimes all your throttles are not enough to stop brute force attacks or any kind of massive attacks, so it can help you to drop, some attackers who use tor or open proxies. How it works The ipChecker has some plugins...

CVE-2021-26814

CVE-2021-26814 A simple python PoC to exploit CVE-2021-26814 and gain RCE on Wazuh Manager v.4.0.0-4.0.3 through the API service. To run it, simply make the .py script executable and launch it with the required parameters. PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport SRCPORT -tip DEST...

EUVD-2026-115244

Control Web Panel CWP before webpanelversion 1.30 contains a missing authentication vulnerability that allows attackers able to reach the loopback API service to invoke root-privileged API routes without presenting an access token. Attackers can access endpoints such as /v1/restoredatabase/,...

CVE-2026-77877: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows…

Control Web Panel CWP before webpanelversion 1.30 contains a missing authentication vulnerability that allows attackers able to reach the loopback API service to invoke root-privileged API routes without presenting an access token. Attackers can access endpoints such as /v1/restoredatabase/,...

PT-2026-135492

Control Web Panel CWP before webpanel version 1.29 contains a missing authentication vulnerability that allows attackers able to reach the loopback API service to invoke root-privileged API routes without presenting an access token. Attackers can access endpoints such as /v1/restoredatabase/,...

CVE-2014-0160-Chrome-Plugin

Heartbleed chrome plugin DEPRECATED Chrome plugin who will look-up if the current site and all subdomains called are vulnerable to CVE-2014-0160. The vulnerability check is done by an API service who's now dead it wasn't in 2014! May the code can be useful to someone anyway, if someone found a ne...

CVE-2021-26814

CVE-2021-26814 A simple python PoC to exploit CVE-2021-26814 and gain RCE on Wazuh Manager v.4.0.0-4.0.3 through the API service. To run it, simply make the .py script executable and launch it with the required parameters. PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport SRCPORT -tip DEST...

PT-2026-118482

Name of the Vulnerable Software and Affected Versions SuggestArr versions prior to 3.0.0 Description An authentication bypass exists in the local bypass authentication mode. The enforce authentication function in api service/auth/middleware.py trusts the request.remote addr value, which is derive...

dev.vertique:vertique-rest-openapi-validation (>=0.1.0, <=0.3.0), io.smallrye.reactive:smallrye-mutiny-vertx-web-api-service (>=4.0.1, <=4.0.2) +5 more potentially affected by CVE-2026-102461 via io.vertx:vertx-openapi (>=5.1.5, <=5.1.9)

io.vertx:vertx-openapi MAVEN version =5.1.5, =0.1.0, =4.0.1, =1.1.0-rc1, =5.1.5, =5.1.5, =5.1.5, =5.1.5, =5.1.9 Source cves: CVE-2026-102461 Source advisory: MEND:CVE-2026-102461...

Resource Exhaustion

code.vikunja.io/api is vulnerable to a resource exhaustion. The vulnerability is due to the failure to limit the number of parsed CSV rows in the /api/v2/migration/csv/migrate endpoint, which allows an authenticated attacker to upload a CSV file containing millions of small records, exhaust proce...

columbus-server

Servidor Columbus ¡Este repositorio está obsoleto! ‼️ El componente del servidor se ha movido a https://github.com/elmasy-com/columbus. Columbus Project es un servicio de descubrimiento de subdominios basado en API, un servicio de enumeración de subdominios extremadamente rápido con funciones...

CVE-2026-86102

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

CVE-2026-101891

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

EUVD-2026-88364

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

CVE-2026-101891 WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

CVE-2026-101891

An improper access control vulnerability exists in an internal API service on WatchGuard Access Points . This flaw allows an unauthenticated attacker with network access to the access point to obtain a valid API session . No specific exploit details or remediation steps are provided in the docume...

CVE-2026-101891 WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

EUVD-2026-88362

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...