cve-2022-24112

Apache APISIX 2.12.1 Remote Code Execution and Docker Lab Давайте склонируем этот репозиторий с помощью gitclone, затем перейдем в apisix-docker/examples. В этом файле docker-compose.yml мы уже заменили образ на image: apache/apisix:2.12.0-alpine, потому что уязвимость присутствует именно в этой...

CVE-2021-45232-RCE

CVE-2021-45232 CVE-2021-45232 Apache apisix Dashboard API несанкционированное RCE Версия: 2.10.1 Fofa: title="Apache APISIX Dashboard" POC: root@kitploit: IP:PORT/apisix/admin/migrate/export...

CVE-2022-24112

Exploitation d'exécution de code à distance RCE Apache APISIX 2.12.x Ce script Python est une preuve de concept PoC pour une vulnérabilité d'exécution de code à distance RCE dans les versions 2.12.0 et 2.12.1 d'Apache APISIX. La vulnérabilité réside dans l'utilisation abusive du champ Lua...

Kong Admin <=2.03 - Admin API Access

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. id: CVE-2020-11710 info: name: Kong Admin =2.03 - Admin API Access author: pikpikcu severity: critical description: Kong Admin through 2.0.3 contains an issue v...

Apache APISIX - Remote Code Execution

A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. When the admin key was changed or the port of Admin API was changed to a port different...

CVE-2022-24112_POC

POC POCs collectés CVE-2022-24112 Pour l'environnement du laboratoire Chunqiu Yunjing CVE-2022-24112, j'ai modifié deux POCs, en adaptant légèrement ceux de M4xSec et twseptian pour les adapter au laboratoire Chunqiu Yunjing : Chunqiu Yunjing:CVE-2022-24112 : Apache APISIX est un service de...

CVE-2026-55468

Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the internal Pages admin API returns page fields declared in apifields without sufficient access control, allowing a user with Wagtail admin...

CVE-2026-55468 Wagtail: Improper restriction handling on Pages admin API

Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the internal Pages admin API returns page fields declared in apifields without sufficient access control, allowing a user with Wagtail admin...

CVE-2026-55468

CVE-2026-55468 affects the internal Pages admin API in Wagtail , an open-source CMS built on Django. The API returns page fields declared in api_fields without sufficient access control , allowing any user with Wagtail admin access to retrieve restricted draft and live page content , including ba...

CVE-2020-13945-EXPLOIT

CVE-2020-13945 - Apache APISIX Exécution de code à distance RCE Ce dépôt contient un exploit de preuve de concept PoC pour une vulnérabilité dans Apache APISIX. La vulnérabilité survient lorsque l'API Admin est activée et que les règles de restriction d'accès par IP sont supprimées, permettant au...

Apache-APISIX-CVE-2022-24112

Apache APISIX Remote Code Execution CVE-2022-24112 - Эксплойт Краткое описание Злоумышленник может использовать плагин batch-requests для отправки запросов, обходящих ограничение IP-адресов для Admin API. Конфигурация Apache APISIX по умолчанию с ключом API по умолчанию уязвима для удаленного...

kong-pwn

kong-pwn 노출된 KongAPI를 프록시처럼 사용하여 메타데이터 URL 또는 내부 URL을 획득합니다. CVE-2020-11710 - 취약점이 아니라 잘못된 구성입니다. 사용 방법 root@kitploit: usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are required: -u/--url, -s/--ssrf 예시 root@kitploit: $ python3 kong-pwn.py -u...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

Wagtail: Improper restriction handling on Page translation API endpoint

Impact A CMS user with the "submit translations" permission, could use the Admin API's "copy for translation" endpoint to copy an existing page that they do not have edit access to, allowing them to view its contents. Patches Patched versions have been released as Wagtail 7.0.9, 7.3.4, 7.4.3 and...

GHSA-RRWH-6JRQ-WP5V

creationtimestamp| type| source ---|---|--- 2026-08-20 17:51:42+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtjsq4tke52x...

PT-2026-80770

Name of the Vulnerable Software and Affected Versions Wagtail versions prior to 7.0.9 Wagtail versions prior to 7.3.4 Wagtail versions prior to 7.4.3 Wagtail versions prior to 8.0rc2 Description The internal Pages admin API returns page fields declared in api fields without sufficient access...

CVE-2026-62670 Fail-open authorization in grav-plugin-flex-objects admin-next API: api.access user gets full CRUD on permission-less directories (requireFlexPermission missing else-deny)

Grav Flex Objects Plugin allows you to build custom collections of objects. Prior to 1.4.3, the Grav Flex Objects Admin Next API requireFlexPermission method in classes/Api/FlexApiController.php returns without denying access when a directory blueprint omits config.admin.permissions. An...

CVE-2026-76211 phpMyFAQ before 4.1.7 Information Disclosure via Admin API

phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATIONEDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind...

EUVD-2026-62452

phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATIONEDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind...

CVE-2026-76211

phpMyFAQ before 4.1.7 contains an authorization flaw in its admin API. The CONFIGURATION_EDIT permission is not properly enforced on read endpoints for LDAP , Elasticsearch , OpenSearch , and dashboard configuration. Any authenticated user with a valid session can call these endpoints and retriev...