CVE-2026-42208-Lab

CVE-2026-42208 — PoC de Timing de Injeção SQL Pré-Autenticação no LiteLLM Laboratório Docker local e PoC de menor dano para CVE-2026-42208, uma vulnerabilidade de injeção SQL pré-autenticação no caminho de verificação de chave de API do LiteLLM Proxy. Este repositório demonstra a diferença entre...

CVE-2026-42208

LiteLLM proxy (AI Gateway) versions 1.81.16–1.83.6 suffer a SQL injection in the proxy API key verification path where the caller-supplied key is interpolated into a SQL query during error handling. An unauthenticated attacker can send a crafted Authorization header to LLM routes (e.g., POST /cha...

CVE-2024-6397

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verification of the API key. This makes it possible for unauthenticated attackers to log in as any existing...