CyberPanel 2.4.3-2.4.5 - AI Scanner Debug Disclosure

CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...

SMTP WP Plugin Directory Listing

The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access. id: CVE-2020-35234 info: name: SMTP WP Plugin Directory Listing author: PR3R00T severity: high description: The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and i...

CommScope Ruckus IoT Controller - Information Disclosure

CommScope Ruckus IoT Controller is susceptible to information disclosure vulnerabilities because a 'service details' API endpoint discloses system and configuration information to an attacker without requiring authentication. This information includes DNS and NTP servers that the devices use for...

Dgraph <= 25.3.2 - Admin Token Disclosure

Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...

ReadToMyShoe - Generation of Error Message Containing Sensitive Information

ReadToMyShoe generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, it will include the full URL of the request, which...

Debug Endpoint pprof - Exposure Detection

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8,...

W3 Total Cache < 2.8.2 - Log File Exposure

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...

CVE-2026-32662

CERT/CC VU653116 | CISA Advisory ICSA-26-055-03 | All CVEs | Case Repository CVE-2026-32662: 프로덕션 환경의 활성 디버그 코드 권고 필드| 값 ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 5.3 Medium 벡터| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-489 Active Debug Code 연구자| Michael...

CVE-2026-23744-POC

설명 이 취약점은 MCPJam Inspector가 디버깅 및 개발용으로 설계된 내부 API 엔드포인트를 노출하기 때문에 존재합니다. 이러한 엔드포인트는 사용자 제어 입력을 수락하고 적절한 검증이나 삭제 없이 이를 시스템 수준 프로세스 실행에 직접 전달합니다. 취약한 엔드포인트/api/mcp/connect에 조작된 요청을 전송함으로써, 공격자는 serverConfig 객체를 제어하고 호스트에서 실행할 임의의 명령을 지정할 수 있습니다. 애플리케이션은 사용자 입력을 기반으로 프로세스를 생성하고 이를 유효한 MCP 서버로 취급하려고...

CVE-2021-3129-Script

CVE-2021-3129 Laravel = v8.4.2 디버그 모드: 원격 코드 실행 CVE-2021-3129 사용법： root@kitploit: python3 exp.py http://127.0.0.1:8888 Try to use Laravel/RCE1 for exploitation. +exploit: Laravel/RCE1 Result: Try to use Laravel/RCE2 for exploitation. +exploit: Laravel/RCE2 Result: Try to use Laravel/RCE3 for...

laravel-8.4.2-rce

laravel-8.4.2-rce 환경 설정 root@kitploit: git clone https://github.com/laravel/laravel.git cd laravel git checkout e849812 composer install composer require facade/ignition==2.5.1 php artisan serve 사용법 root@kitploit: python3 exploit.py http://pwnme.me:8000...

CVE-2026-22679

CVE-2026-22679: Weaver E-cology 무인증 RCE dubboApi 디버그 엔드포인트 -critical TL;DR Weaver E-cology 10.0빌드 20260312 이전 버전에는 /papi/esearch/data/devops/dubboApi/debug/method 엔드포인트에 치명적인 무인증 원격 코드 실행 취약점이 존재합니다. 공격자는 인증 없이 interfaceName 및 methodName POST 파라미터를 통해 임의의 명령을 주입할 수 있으며, 이를 통해 시스템 전체를 장악할 수 있습니다...

CVE-2024-10586-Poc

Vulnerability Information Description The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbtpullimage function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated...

AZL-101538 CVE-2026-89924 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix olddata leak in guest debug error path importwpinfo allocates a per-watchpoint olddata buffer to back up the original guest memory contents. If a later watchpoint of the same KVMSETGUESTDEBUG request fails to impor...

CVE-2026-89924

This Linux kernel vulnerability affects the KVM s390 subsystem's guest debug interface. In __import_wp_info(), per-watchpoint old_data buffers are allocated to back up original guest memory contents. When a later watchpoint in the same KVM_SET_GUEST_DEBUG request fails to import, kvm_s390_import_...

EUVD-2026-80524

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix olddata leak in guest debug error path importwpinfo allocates a per-watchpoint olddata buffer to back up the original guest memory contents. If a later watchpoint of the same KVMSETGUESTDEBUG request fails to impor...

CVE-2025-67399

CVE-2025-67399 Vulnerability Summary The AIRTH Smart Home AQI Monitor uses a CB3S Bluetooth SoC based on the BK7231N chipset with Software version number: 2.1.17. By physically accessing the device and identifying the SoC, the exposed UART debug/programming pins were located using the publicly...

CVE-2021-3129

CVE-2021-3129 Laravel = v8.4.2 debug mode: Remote code execution CVE-2021-3129 Modified from @crisprss's https://github.com/crisprss/LaravelCVE-2021-3129EXP , added more available gadgets for traversal Use： root@kitploit: python3 exp.py http://127.0.0.1:8888 Preview： root@kitploit:...

CVE-2026-11984 Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a missing capability check on the ai-debug-code URL-parameter. This makes it possible for unauthenticated attackers to view...

CVE-2026-11984

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is affected by an authorization bypass in all versions up to and including 2.8.16 . The root cause is a missing capability check on the ai-debug-code URL-parameter, which allows unauthenticated attackers to view administrator-configu...