cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI vulnerabilidad de proxy confundido Confused Deputy - Proyecto de verificación de investigación de seguridad Declaración importante Este repositorio es un repositorio de compilación derivado y mantiene una relación subordinada con el repositorio principal original...

CVE-2026-81375

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability w...

CVE-2026-81375

Google Cloud Application Integration versions prior to 2026-06-30 are affected by a Confused Deputy vulnerability in the EmailTask component. An authenticated attacker can exploit this by using a crafted attachment file path to read and exfiltrate arbitrary Google-internal files. This vulnerabili...

CVE-2026-81375 Confused Deputy in Application Integration allows Internal File Read

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability w...

EUVD-2026-88214

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability w...

StrandHogg2

StrandHogg2 Poc para StrandHogg2 CVE-2020-0096 Información de la vulnerabilidad original Descripción actual En startActivities de ActivityStartController.java, existe una posible escalada de privilegios debido a un diputado confundido. Esto podría conllevar una escalada local de privilegios sin...

CVE-2026-20516

CVE-2026-20516: MiracastService confused deputy en Android TV Investigación y divulgación por Davide Di Matteo @Dingo97. Este es mi primer CVE acreditado. Encontré un servicio Miracast con privilegios de sistema, exportado incorrectamente, mientras investigaba un PEAQ Android TV. Un llamador pued...

CVE-2026-49086

Reproducción de Anulación de Encabezado de Enrutamiento / Confused Deputy en camel-dapr CVE-2026-49086 Este proyecto demuestra una falla de anulación de encabezado de enrutamiento confused-deputy en el componente camel-dapr de Apache Camel, registrada como CVE-2026-49086. El consumidor pub/sub de...

CVE-2026-72668

Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts...

CVE-2026-72668 Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation

Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts...

EUVD-2026-87792

Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts...

CVE-2026-72668

Kibana versions 9.4.0 through 9.4.6 are vulnerable to a Confused Deputy (CWE-441) flaw in the Agent Builder component. An authenticated non-administrative user with both Agent Builder and Workflows privileges can manipulate a shared agent to perform privileged operations under the identity of a h...

CVE-2026-100614 Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker

Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning worker that trusts image object keys from mutable database rows without validating ownership. An authenticated attacker can place a victim tenant's image key in a row they control, causing the...

EUVD-2026-87709

Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning worker that trusts image object keys from mutable database rows without validating ownership. An authenticated attacker can place a victim tenant's image key in a row they control, causing the...

CVE-2026-100614

Capgo versions before 12.244.1 are vulnerable to a cross-tenant integrity issue within the metadata-cleaning worker . The root cause is that the worker trusts image object keys from mutable database rows without performing ownership validation. An authenticated attacker can exploit this by insert...

CVE-2026-100614 Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker

Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning worker that trusts image object keys from mutable database rows without validating ownership. An authenticated attacker can place a victim tenant's image key in a row they control, causing the...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-64640

CVE-2026-64640 — Apache Polaris: emisión de credenciales antes de la validación de ubicación en register Un reproductor autónomo de un solo comando para CVE-2026-64640 : los endpoints register de Iceberg REST en Apache Polaris generan credenciales de almacenamiento en la nube para una ruta...

Kibana 9.4.7, 9.5.0 Security Update (ESA-2026-85)

Unintended Proxy or Intermediary 'Confused Deputy' in Kibana Leading to Privilege Escalation Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations...

Linux Distros Unpatched Vulnerability : CVE-2026-95361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in DevTools. CVE-2026-95361 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...