Open WebUI < 0.9.5 - Information Disclosure

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. id: CVE-2026-45397 info: name: Open...

CVE-2020-13937

CVE-2020-13937 1.脆弱性の説明： Apache Kylinには、認証なしで設定情報を公開するrestful apiがあります。 2再現 脆弱性がある場合の比較 脆弱性がない場合の比較 PoCの作成 単一URLの正しい検証 ：pocsuite -r CVE-2022-26134.py -u url 単一URLの誤った検証：pocsuite -r CVE-2022-26134.py -u url バッチスキャン：pocsuite -r CVE-2022-26134.py -u url.txt 3.スクリプトコード from collections import...

CVE-2024-9014

CVE-2024-9014 - pgAdmin 4 OAuth2 認証バイパス エクスプロイトツール このリポジトリには、pgAdmin 4 の CVE-2024-9014 脆弱性を検出および悪用するためのツールが含まれています。この脆弱性により、攻撃者は OAuth2 認証をバイパスして機密リソースにアクセスできる可能性があります。 ツール 1. cve20249014check.py このスクリプトは、pgAdmin 4 のインストールを調査し、公開された OAuth2 設定を探すことで、対象システムが CVE-2024-9014 に対して脆弱かどうかをチェックします。 使用方法...

CVE-2020-13937

説明 Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha には、認証なしでKylinの設定情報を公開するRESTful APIが1つ存在します。そのため、機密情報が漏洩する危険性があります。 悪用方法...

nuclei-CiscoRV320Dump-CVE-2019-1653

Ciscoルーター設定露出の脆弱性 脆弱性の説明 このリポジトリは、特定のCiscoルーターにおいて、公開URLを介してconfig.exp設定ファイルが露出する脆弱性の悪用プロセスを詳述しています。このファイルには、認証情報（USERNAMEやPASSWD）、ネットワーク設定、その他システムの重要な詳細などの機密情報が含まれる可能性があります。認証なしでアクセス可能な場合、デバイスとそれが展開されているネットワークのセキュリティを危険にさらす可能性があります。 関連CVE...

CVE-2026-100418

The software Flame through 2.4.0 contains an information exposure vulnerability within the unauthenticated GET /api/config endpoint. The root cause is a lack of field redaction, allowing the endpoint to return the entire configuration object. Attackers can send a single unauthenticated request to...

CVE-2026-76706 Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, whic...

CVE-2026-76706 Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, whic...

CVE-2026-90446 Server-Side Request Forgery in Malcolm

An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents. This allows an authenticated attacker to substitute an arbitrary backend...

CVE-2026-89175 Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

PT-2026-89798

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

CVE-2026-76963

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

CVE-2026-76963 Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

CVE-2026-82684

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior contain a Missing Authorization flaw that could allow an attacker to extract system credentials, configurations, or flash contents. The device is deployed in critical manufacturing and energy sectors . This CVE is part of a group of three ...

CVE-2026-82684 Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, configurations, or flash contents...

CVE-2026-84676

Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2026-84658

Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier uses the @DataBoundConstructor annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to read that configuration...

EUVD-2026-69723

WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors. Attackers can send an unauthenticated GET request to plugin/MobileManager/getConfiguration.json.ph...

PT-2026-84624

The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission handler, allowing unauthenticated users to disclose notification recipient addresses, confirmation redirect targets and...

Linux Distros Unpatched Vulnerability : CVE-2026-75329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Netty configuration distribution service port 8283 of super-diamond-server = 1.3.3 has no authentication mechanism. Attackers can directly obtain the full...