812 matches found
CVE-2026-46587
camel-couchbase CCB Header Injection Reproducer CVE-2026-46587 This project demonstrates a message-header injection in Apache Camel's camel-couchbase component, tracked as CVE-2026-46587. The component reads several Exchange headers to control its behaviour — CCBKEY document key, CCBID document i...
N1QLMap
Description N1QLMap is an N1QL exploitation tool. Currently works with Couchbase database. The tool supports data extraction and performing SSRF attacks via CURL. More information can be found here: https://labs.f-secure.com/blog/n1ql-injection-kind-of-sql-injection-in-a-nosql-database. Usage Hel...
CVE-2026-61902
Apache bRPC versions before 1.18.0 do not consistently enforce the configured maxbodysize limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache and couchbase response parsing. A remote unauthenticated peer can cause an affected process to buffer message data beyond the configured...
EUVD-2026-107176
Apache bRPC versions before 1.18.0 do not consistently enforce the configured maxbodysize limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache and couchbase response parsing. A remote unauthenticated peer can cause an affected process to buffer message data beyond the configured...
CVE-2026-61902
Apache bRPC versions before 1.18.0 are vulnerable to memory exhaustion and denial of service because they do not consistently enforce the max_body_size limit during non-progressive HTTP/1 and HTTP/2 parsing, as well as memcache and couchbase response parsing. A remote unauthenticated peer can tri...
CVE-2026-61902 Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits
Apache bRPC versions before 1.18.0 do not consistently enforce the configured maxbodysize limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache and couchbase response parsing. A remote unauthenticated peer can cause an affected process to buffer message data beyond the configured...
PT-2026-120535
Apache bRPC versions before 1.18.0 do not consistently enforce the configured max body size limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache and couchbase response parsing. A remote unauthenticated peer can cause an affected process to buffer message data beyond the configured...
Couchbase Server - Broken Access Control
Couchbase Server versions 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0-4.6.5, 5.0.0, 5.1.1, 5.5.0, and 5.5.1 contain insecure permissions for the projector and indexer REST endpoints caused by unauthenticated access, letting attackers access administrative APIs without authentication, exploit require...
SUSE CVE-2025-52490
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...
Couchbase Buckets Unauthenticated REST API - Detect
Couchbase Buckets REST API without authentication was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Couchbase Buckets REST API without authentication was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...
Couchbase Sync Gateway Detection
Detects Couchbase Sync Gateway. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Couchbase Sync Gateway.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Couchbase Sync Gateway Detection', 'description': 'Detects...
Couchbase Server Console - Detect
Couchbase Server administrative console was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Couchbase Server administrative console was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Couchbase...
Couchbase Server - Broken Access Control Detection
Couchbase Server versions 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0-4.6.5, 5.0.0, 5.1.1, 5.5.0, and 5.5.1 contain insecure permissions for the projector and indexer REST endpoints caused by unauthenticated access, letting attackers access administrative APIs without authentication, exploit require...
CouchbaseProducer Component Data Access
The vulnerability of the CouchbaseProducer class in the camel-couchbase component of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...
CouchDbProducer Camel Framework Data Access
The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...
org.apache.camel.kafkaconnector:camel-couchbase-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:itests-couchbase (>=4.0.0, <=4.14.5) +5 more potentially affected by CVE-2026-46588 via org.apache.camel:camel-couchbase (>=4.0.0, <=4.14.7)
org.apache.camel:camel-couchbase MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46588 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821885...
org.apache.camel.kafkaconnector:camel-couchbase-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-couchbase (4.18.0) +4 more potentially affected by CVE-2026-46588 via org.apache.camel:camel-couchbase (>=4.15.0, <=4.18.2)
org.apache.camel:camel-couchbase MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46588 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821885...
org.apache.camel.quarkus:camel-quarkus-couchbase (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-couchbase-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-46588 via org.apache.camel:camel-couchbase (>=4.19.0, <=4.20.0)
org.apache.camel:camel-couchbase MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46588 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17821885...
org.apache.camel.quarkus:camel-quarkus-couchbase (>=3.35.0, <=3.36.0), org.apache.camel.quarkus:camel-quarkus-couchbase-deployment (>=3.35.0, <=3.36.0) +1 more potentially affected by CVE-2026-46587 via org.apache.camel:camel-couchbase (>=4.19.0, <=4.20.0)
org.apache.camel:camel-couchbase MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46587 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822328...
org.apache.camel.kafkaconnector:camel-couchbase-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-couchbase (4.18.0) +4 more potentially affected by CVE-2026-46587 via org.apache.camel:camel-couchbase (>=4.15.0, <=4.18.2)
org.apache.camel:camel-couchbase MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46587 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822328...