CVE-2026-108904

The pH7Builder (pH7 Social Dating CMS) version before 18.5.0 contains an information disclosure vulnerability. The root cause is that the UserController::users() and user() functions return unfiltered database rows to API clients. An attacker possessing a valid private API key can exploit this to...

CVE-2026-108905 pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header

pH7Builder pH7 Social Dating CMS before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks by spoofing the Host header. Attackers can send Host: localhost with privateapikey=dev772277 and the default allowed URL t...

CVE-2026-108904 pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController

pH7Builder pH7 Social Dating CMS before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users and user return unfiltered database rows. Attackers holding a valid private API key can retrieve bcrypt password...

EUVD-2026-97068

pH7Builder pH7 Social Dating CMS before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks by spoofing the Host header. Attackers can send Host: localhost with privateapikey=dev772277 and the default allowed URL t...

CVE-2026-108904 pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController

pH7Builder pH7 Social Dating CMS before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users and user return unfiltered database rows. Attackers holding a valid private API key can retrieve bcrypt password...

chaos-client

Chaos Client Cliente Go para comunicarse con la API del dataset Chaos. Inglés • 中文 Instalación go install -v github.com/projectdiscovery/chaos-client/cmd/chaos@latest Uso chaos -h Esto mostrará la ayuda de la herramienta. A continuación se indican todas las opciones que admite. -key string...

CVE-2026-108719

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callbackurl extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the...

CVE-2026-108719

LLMGateway through 1.20.0 is vulnerable to a blind server-side request forgery (SSRF) vulnerability in its video-generation callback_url extension. API key holders can exploit this by supplying loopback, private, or cloud-metadata URLs. The vulnerability exists because the application fails to pe...

CVE-2026-108719 LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callbackurl extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the...

EUVD-2026-96993

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callbackurl extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the...

CVE-2026-108719 LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callbackurl extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the...

-CVE-2025-59528-PoC

CVE-2025-59528-PoC FOR EDUCATIONAL PURPOSES ONLY A simple python script to exploit CVE-2025-59528, this an Authenticated RCE vulnerability in Flowise application, a popular AI tool, that is also part of an HTB seasonal challenge, on which I tested it btw. If it's not working, make sure the comman...

pigeon

Pigeon Your agent spawned a sub-agent and handed it the same API key. That sub-agent can now deploy to production, read the payments database, and merge to main. Pigeon stops that. You hand the child a Pigeon Pass : a narrowed, signed credential for what it may do, not a copy of everything you ca...

apkprobe

APKprobe APK decompiler and secrets scanner for Android security research. Automatically extract API keys , endpoints , tokens , and other leaked credentials from Android applications. Works with .apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab files. Perfect for apk2url extractio...

CVE-2026-108719: Server-Side Request Forgery (SSRF)

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callbackurl extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

CVE-2025-44823

Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1 ▶️ PoC Demo CVE ID: CVE-2025-44823 Date: 2025-04-02 Authors: Alex Tisdale, Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

cve-2018-15133

POC - CVE-2018-15133 Usage: $ ./CVE-2018-15133 -h Usage: ./CVE-2018-15133 options Options: -APIKEY string API key del sitio web de Laravel, codificada en base64 -URL string URL del sitio web de Laravel a atacar -command string Comando a ejecutar en el sitio web vulnerable; si no se especifica, se...

CVE-2026-107841 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether t...

EUVD-2026-95937

pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether t...