CVE-2026-42208-Lab

CVE-2026-42208 — LiteLLM 预认证 SQL 注入计时 PoC 本地 Docker 实验环境及针对 CVE-2026-42208 的最小危害 PoC，该漏洞是 LiteLLM Proxy API 密钥验证路径中的预认证 SQL 注入漏洞。 本仓库通过基于计时的 PostgreSQL pgsleep 证明，演示了存在漏洞的 LiteLLM 实例与已修补的 LiteLLM 实例之间的差异。 范围：仅限本地实验环境 / 授权测试。默认 PoC 不会转储数据库数据，也不会修改数据库数据。 概述 CVE-2026-42208 影响 LiteLLM Proxy 1.81.16 至...

CVE-2026-42208

LiteLLM proxy (AI Gateway) versions 1.81.16–1.83.6 suffer a SQL injection in the proxy API key verification path where the caller-supplied key is interpolated into a SQL query during error handling. An unauthenticated attacker can send a crafted Authorization header to LLM routes (e.g., POST /cha...

CVE-2024-6397

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verification of the API key. This makes it possible for unauthenticated attackers to log in as any existing...