CVE-2026-46438

In versions prior to 2.6 , the wger fitness manager is vulnerable to a cross-user data corruption flaw. An authenticated attacker can inject arbitrary workout log entries into another user's SlotEntry by submitting a POST /api/v2/workoutlog/ request with a victim's slot_entry ID. This is possible...

CVE-2026-46438 wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry

wger is a free, open-source workout and fitness manager. Prior to version 2.6, an authenticated attacker can inject arbitrary workout log entries into any other user's SlotEntry by supplying the victim's slotentry ID in a POST /api/v2/workoutlog/ request. The slotentry foreign key is not included...

wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry

Summary An authenticated attacker can inject arbitrary workout log entries into any other user's SlotEntry by supplying the victim's slotentry ID in a POST /api/v2/workoutlog/ request. The slotentry foreign key is not included in the ownership verification performed by...

CVE-2026-46437

The open-source fitness manager wger contains a vulnerability in its authentication and session lifecycle affecting versions prior to 2.6 . Specifically, bearer-style API credentials —including DRF authtokens and JWT refresh tokens —remain valid even after a user performs a logout or a password c...

EUVD-2026-94334

wger is a free, open-source workout and fitness manager. Versions prior to 2.6 have a vulnerability in the authentication/session lifecycle of wger where bearer-style API credentials remain valid after a user logs out and after a user changes their password. An attacker who steals a victim’s DRF...

CVE-2026-20896

كود إثبات المفهوم CVE-2026-20896 يقوم هذا البرنامج النصي بأتمتة استغلال الثغرة المنطقية في التحقق من مسارات واجهة برمجة التطبيقات الخاصة بـ Gitea، مما يسمح بإجبار الخادم على منح رمز إداري صالح من خلال هجوم تجاوز الدليل Directory Traversal في رأس التفويض. !/usr/bin/env python3 PoC: Gitea...

CVE-2025-7775-vulnerable-lab

مختبر ضعيف لـ CVE-2025-7775 يوفر هذا المستودع إعدادًا ضعيفًا لاختبار قالب nuclei الخاص بـ CVE-2025-7775. التشغيل docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app اختبارات الثغرات 1. تنفيذ الأوامر عن بُعد RCE curl -X POST http://localhost:5000/api/v1/configuration ...

CVE-2026-107180

On MISP instances configured to require TOTP enrolment Security.otprequired, the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests. An authenticated user who had not yet enrolled in TOTP could bypass the forced setup by issuing any non-browser...

CVE-2026-105138

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/entryid t...

CVE-2026-23744

CVE-2026-23744 — تنفيذ تعليمات برمجية عن بُعد بدون مصادقة في MCPJam Inspector إثبات مفهوم PoC لتنفيذ التعليمات البرمجية عن بُعد بدون مصادقة لثغرة CVE-2026-23744. تعرّض MCPJam Inspector الإصدار 1.4.2 والإصدارات الأقدم وظائف عبر /api/mcp/connect يمكنها تشغيل أمر خادم MCP يتحكم فيه المهاجم دون مصادق...

CVE-2026-54519

CVE-2026-54519 ai-agent-automation عدم وجود فحوصات للملكية في واجهات برمجة تطبيقات الذاكرة سمح بقراءة وحذف ذاكرة عبر المستخدمين. الإعلان الرئيسي: GHSA-qv97-83w4-ff86 نسبة الفضل للباحث: @chaitanyagarware في لمحة الحقل| القيمة ---|--- CVE| CVE-2026-54519 GHSA| GHSA-qv97-83w4-ff86 المشروع|...

CVE-2025-54123

CVE-2025-54123: هجوم حقن الأوامر في Hoverfly إلى تنفيذ التعليمات البرمجية عن بُعد PoC نظرة عامة يحتوي هذا المستودع على نص برمجي لإثبات المفهوم PoC بلغة Python للتفاعل مع مثيلات Hoverfly المتأثرة بـ CVE-2025-54123. يدعم النص البرمجي: المصادقة باستخدام اسم المستخدم وكلمة المرور المصادقة باستخدام رم...

EUVD-2026-94318

On MISP instances configured to require TOTP enrolment Security.otprequired, the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests. An authenticated user who had not yet enrolled in TOTP could bypass the forced setup by issuing any non-browser...

CVE-2026-107180 MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances

On MISP instances configured to require TOTP enrolment Security.otprequired, the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests. An authenticated user who had not yet enrolled in TOTP could bypass the forced setup by issuing any non-browser...

CVE-2026-107180

On MISP instances where Security.otp_required is enabled, a logic flaw allows authenticated users to bypass mandatory TOTP enrolment . The enforcement mechanism only applied to standard browser requests; consequently, users could bypass the setup by issuing non-browser requests such as AJAX/XHR c...

CVE-2026-107180 MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances

On MISP instances configured to require TOTP enrolment Security.otprequired, the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests. An authenticated user who had not yet enrolled in TOTP could bypass the forced setup by issuing any non-browser...

CVE-2026-107180 MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances

On MISP instances configured to require TOTP enrolment Security.otprequired, the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests. An authenticated user who had not yet enrolled in TOTP could bypass the forced setup by issuing any non-browser...

EUVD-2026-94309

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/entryid t...

CVE-2026-105138

The Obot platform versions 0.12.0 before 0.26.2 is vulnerable to a credential exposure flaw in the MCP Catalog Entry API . Due to insufficiently protected credentials, authenticated basic users with access to an entry can perform a GET request to /api/all-mcps/entries/{entry_id}. This action allo...

CVE-2026-105138 Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/entryid t...