CVE-2026-112337

Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle getgraphevents function that follows @odata.nextLink without host or HTTPS validation. Attackers who influence the nextLink value can redirect manager requests to attacker-controlled endpoints,...

CVE-2026-112337

Wazuh versions 3.7.0 before 4.14.9 are vulnerable to a server-side request forgery (SSRF) vulnerability within the Azure wodle get_graph_events() function. The root cause is the lack of host or HTTPS validation when following the @odata.nextLink parameter. An attacker who can influence the nextLi...

CVE-2026-112337: wazuh: Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle…

Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle getgraphevents function that follows @odata.nextLink without host or HTTPS validation. Attackers who influence the nextLink value can redirect manager requests to attacker-controlled endpoints,...

CVE-2026-49272

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validatetokenrequest to check that the devicecode parameter is present and valid. A caller whose client request is accepte...

CVE-2026-49272

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validatetokenrequest to check that the devicecode parameter is present and valid. A caller whose client request is accepte...

CVE-2026-49272 OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validatetokenrequest to check that the devicecode parameter is present and valid. A caller whose client request is accepte...

CVE-2026-49272

The OAuthLib library (Python 3.6+) contains a vulnerability in its RFC 8628 device workflow affecting versions 3.3.0 through 4.0.1 . The root cause is that the DeviceCodeGrant.validate_token_request method fails to verify that the device_code parameter is present and valid. Consequently, an attac...

CVE-2026-54145

OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions before 0.57.5, the approval gate uses the JSON-RPC bearer token as an approval session identifier. This exposes the credential through persisted approval records, events, debug logs...

CVE-2026-54146

The OpenHuman desktop application and Rust library (versions 0.53.15 before 0.57.5 ) on macOS are vulnerable to a bearer token leak. The core_process.rs file in the Tauri desktop process incorrectly publishes the OPENHUMAN_CORE_TOKEN in the process environment, even though the core runs as an in-...

CVE-2026-54146 OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)

OpenHuman is an open-source agent harness available as a desktop application and Rust library. From 0.53.15 before 0.57.5 on macOS, coreprocess.rs in the Tauri desktop process publishes the per-launch OPENHUMANCORETOKEN bearer credential in its process environment even though the core now runs as...

CVE-2026-54145

The OpenHuman open-source agent harness (desktop application and Rust library) contains a vulnerability in versions prior to 0.57.5 . The approval gate incorrectly uses the JSON-RPC bearer token as an approval session identifier, causing the credential to be exposed in SQLite plaintext , debug lo...

curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

A flaw was found in curl. When an OAuth2 bearer token is used for an HTTPS transfer that redirects to a second URL, curl could unintentionally leak the token. This occurs if the second hostname has entries in the .netrc file, allowing the bearer token intended for the first host to be sent to the...

CVE-2026-80099

CVE-2026-80099 PoC Unauthenticated authentication bypass and RCE exploit targeting Newfold WordPress plugins that bundle wp-module-data. Overview This tool exploits a Bearer token validation flaw in the Newfold wp-module-data module. When a WordPress site using an affected Newfold plugin is not...

SnaffPoint

SnaffPoint What is it SnaffPoint is a tool for pointesters who are in need of some sweetness in this world. It should help you find sensitive files available on SharePoint online and on shared OneDrive files for your company or your customer. How does it work There are actually 2 tools:...

CVE-2025-25257

CVE-2025-25257 CVE‑2025‑25257 is a critical pre-authentication SQL injection vulnerability affecting Fortinet FortiWeb’s Fabric Connector component. It impacts FortiWeb versions: 7.6.0–7.6.3 7.4.0–7.4.7 7.2.0–7.2.10 ≤ 7.0.10 Technical Details The issue resides in the getfabricuserbytoken function...

poc_cve-2026-42208

CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A lab environment for reproducing and detecting CVE-2026-42208 , a critical pre-authentication SQL injection vulnerability in LiteLLM where unsanitized Bearer tokens reach a raw PostgreSQL query. Vulnerability Overview Field| Details ---|-...

CVE-2022-3172

CVE-2022-3172 demo Run poc.sh create resources chmod +x poc.sh ./poc.sh Use Curl curl https://kubernetes.default.svc/apis/metrics.k8s.io/v2beta1/ -k -H "Authorization: Bearer token"...

CVE-2026-42208-Lab

CVE-2026-42208 — LiteLLM Pre-Auth SQL Injection Timing PoC Local Docker lab and least-harm PoC for CVE-2026-42208, a pre-authentication SQL injection vulnerability in LiteLLM Proxy's API key verification path. This repository demonstrates the difference between a vulnerable LiteLLM instance and a...

PT-2026-134499

Name of the Vulnerable Software and Affected Versions FlexStock – Product Stock Sync with Google Sheets for WooCommerce versions prior to 3.17.3 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with subscriber-level...

CLEANSTART-2026-HK96466 Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token

Security vulnerability affects the thingsboard package. Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token...