CVE-2026-81735

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81703

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81699

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

CVE-2026-81680

opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...

CVE-2026-81664

The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basicauth is enabled, wraps each administrative /system/ handler in auth.DecorateWithBasicAuth. TelemetryHandler was left out of that wrap block from 0.27.11, which introduced the route, until 0.27.14, which added i...

CVE-2026-81098

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...

CVE-2026-81094

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2026-80207

APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxies every /api request to the...

CVE-2026-75159

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor Questo file Python decifrerà il file di configurazione utilizzato dalle telecamere hikvision vulnerabili a CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Descrizione Bypass dell'autenticazione delle...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

CVE-2026-46455

CVE-2026-46455 — camel-keycloak controllo ISACTIVE mancante token scaduti accettati Reproducer proof-of-concept eseguibili per la stessa vulnerabilità di Apache Camel, uno per runtime:...

evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

CVE-2026-40022

Bypass dell'autenticazione in camel-platform-http-main su context path non-root CVE-2026-40022 Questo progetto dimostra un bypass dell'autenticazione nel componente camel-platform-http-main di Apache Camel il server HTTP / di gestione integrato del runtime main di Camel, tracciato come...

CVE-2025-29927-scanner

Scanner CVE-2025-29927 Questo script Python identifica gli host vulnerabili a CVE-2025-29927, una vulnerabilità di autorizzazione impropria nel middleware di Next.js che può consentire il bypass dell'autenticazione. Lo script verifica l'utilizzo di Next.js, identifica la versione, rileva l'header...

CVE-2024-47533

CVE-2024-47533 – Exploit di Bypass dell'Autenticazione XML-RPC di Cobbler 📜 Descrizione CVE-2024-47533 è una vulnerabilità critica di bypass dell'autenticazione in Cobbler, un server di installazione Linux che automatizza le installazioni di sistemi operativi via rete. Il difetto è causato da un...

CVE-2022-47986

CVE-2022-47986 Aspera Faspex RCE pre-autenticazione https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Uso del PoC: root@kitploit: python3 poc.py https://xxxxx whoami...

CVE-2026-24207

CVE-2026-24207 — NVIDIA Triton: bypass dell'autenticazione SageMaker verso RCE non autenticata Gli attaccanti non autenticati possono raggiungere la superficie di gestione dei modelli di NVIDIA Triton Inference Server sulle porte HTTP SageMaker e Vertex AI, aggirando la configurazione...

CVE-2026-23813

CVE-2026-23813 — Bypass di pre-autenticazione di AOS-CX Attaccanti remoti non autenticati possono raggiungere l'API REST di gestione di AOS-CX intrufolando un token login attraverso l'espressione regolare troppo permissiva di nginx, esponendo la superficie di configurazione basata su OVSDB inclus...

CVE-2024-9264

CVE-2024-9264 Grafana Post-Auth DuckDB SQL Injection RCE, Lettura file Proof of Concept PoC Questa PoC dimostra lo sfruttamento di CVE-2024-9264 usando un utente autenticato per eseguire una query SQL DuckDB e leggere un file arbitrario dal filesystem o eseguire codice arbitrario in remoto. Il...