1297 matches found
CVE-2025-13315
🛡️ CVE-2025-13315 - Bypass de Autenticación Crítico en Twonky Server 8.5.2 -e63939?style=for-the-badge Un atacante no autenticado puede eludir la autenticación de la API, filtrar credenciales de administrador de los registros y obtener acceso completo de administrador. 📋 Resumen CVE-2025-13315 es...
CVE-2025-49132-PoC
Guide to use script that exploit the Pterodactyl Path Traversal at locale.json Requirements Exposed Redis Server Panel URL Guide 1. Get access to the server configuration file, which has APPKEY and Redis Database Password + IP 2. Use forgecookie to generate a pterodactylsession cookie 3. Use that...
Wazuh - Unsafe Deserialization Remote Code Execution
A critical Remote Code Execution RCE vulnerability exists in Wazuh server versions = 4.4.0 and = 4.4.0 and 4.9.1. The vulnerability occurs due to unsafe deserialization in the wazuh-manager package, specifically in the DistributedAPI where parameters are serialized as JSON and deserialized using...
Information Exposure
Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Information Exposure via the Certificates.get and Certificates.listing API commands, which return the sslkeyfile field containing raw PEM TLS private-key content in JSON responses. An...
Incorrect Default Permissions
Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Incorrect Default Permissions in the EmailSender.add API command when the mail.allowexternaldomains policy is not enforced. An attacker can register arbitrary external sender addresse...
CVE-2026-93354 Taskview Community Missing Authentication via OAuth Dynamic Client Registration
Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and requires no...
CVE-2026-16302
The Spectra Legacy – Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the editorassets function, which exposes the uaginstalinkedaccounts option through the uagbblocksinfo object without a capability check. This...
CVE-2026-16302 Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure
The Spectra Legacy – Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the editorassets function, which exposes the uaginstalinkedaccounts option through the uagbblocksinfo object without a capability check. This...
PT-2026-98144
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description An issue exists where the CheckForTwoFactor middleware is enforced in the web middleware group but not in the API middleware group. This allows a user who has authenticated with a password but has n...
PT-2026-97784
Name of the Vulnerable Software and Affected Versions Spectra Legacy – Gutenberg Blocks versions prior to 2.20.1 Description Sensitive information exposure occurs via the editor assets function, which exposes the uag insta linked accounts option through the uagb blocks info object without...
CVE-2026-56681 9Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header
9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper trust the client-supplied X-9r-Real-Ip header in src/dashboardGuard.js when isLocalRequest decides whether canAccessPublicLlmApi may skip...
CVE-2026-92466
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including use...
CVE-2026-92466
CVE-2026-92466 affects zlt2000 microservices-platform through version 6.0.0 . The root cause is the configuration flag zlt.security.auth.urlPermission.enable defaulting to false , which disables all URL-level permission checks after a user has authenticated. As a result, any authenticated user wi...
CVE-2026-92466 microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including use...
CVE-2026-52827
This vulnerability affects Kimai , an open-source time tracking application, in versions prior to 2.59.0 . The root cause is that the KIMAI_SESSION cookie, issued after password verification but before TOTP completion, is accepted by all /api/* endpoints. The API firewall uses the IS_AUTHENTICATE...
CVE-2026-52827 Kimai: Two-factor authentication bypass on the Kimai API
Kimai is an open-source time tracking application. Prior to 2.59.0, the KIMAISESSION cookie issued after password verification but before TOTP completion is accepted by every /api route because config/packages/security.yaml protects the API with ISAUTHENTICATED and...
CVE-2026-52827 Kimai: Two-factor authentication bypass on the Kimai API
Kimai is an open-source time tracking application. Prior to 2.59.0, the KIMAISESSION cookie issued after password verification but before TOTP completion is accepted by every /api route because config/packages/security.yaml protects the API with ISAUTHENTICATED and...
CVE-2026-57147
praisonai-platform (PyPI), the platform layer of the PraisonAI multi-agent system, defaults its JWT signing key to the public literal dev-secret-change-me when PLATFORM_JWT_SECRET is unset. The production guard intended to catch this misconfiguration is ineffective because PLATFORM_ENV defaults t...
Astra Linux – Vulnerability in Zabbix
A low-privilege regular Zabbix user with API access can exploit the SQL injection vulnerability in the include/classes/api/CApiService.php file to execute arbitrary SQL commands using the groupBy parameter...
