CVE-2025-54253-Exploit-Demo

🚨 CVE-2025-54253 – Adobe AEM Forms on JEE OGNL Injection to RCE 🔎 Overview CVE-2025-54253 is a critical OGNL injection vulnerability in Adobe AEM Forms on JEE. It allows unauthenticated attackers to execute arbitrary operating system commands via the /adminui/debug?debug=OGNL: endpoint. Severity:...

CVE-2023-42793-TeamCity-Unauthenticated-RCE

CVE-2023-42793 - JetBrains TeamCity 安全评估工具 本仓库提供了一个基于 Python 的实用工具，旨在评估和演示 CVE-2023-42793 的安全影响，这是一个影响本地部署的 JetBrains TeamCity 服务器的严重漏洞。 漏洞详情 CVE 标识符： CVE-2023-42793 CVSSv3 评分： 9.8（严重） 漏洞类型： 身份验证绕过 / 远程代码执行（RCE） 受影响版本： 2023.05.4 之前的 JetBrains TeamCity 修复版本： 2023.05.4 及后续版本 技术摘要 该漏洞存在于 TeamCity We...

CVE-2025-34171

CVE-2025-34171：CasaOS 中未经身份验证的文件与调试数据暴露 漏洞概述 字段| 值 ---|--- CVE 编号| CVE-2025-34171 影响版本| CasaOS ≤ 0.4.15 修复版本| 无可用补丁 严重性| 中危 CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CWE| CWE-862：缺少授权，CWE-497：向未经授权的控制范围暴露敏感系统信息 执行摘要 CasaOS 0.4.15 及更早版本包含多个未经身份验证的 API...

CVE-2026-23744-POC

描述 此漏洞的存在是因为 MCPJam Inspector 暴露了用于调试和开发的内部 API 端点。这些端点接受用户控制的输入，并将其直接传递给系统级进程执行，而无需进行适当的验证或清理。 通过向易受攻击的端点（/api/mcp/connect）发送精心构造的请求，攻击者可以控制 serverConfig 对象，并指定要在主机上执行的任意命令。 该应用程序尝试根据用户输入生成一个进程，并将其视为有效的 MCP 服务器。然而，由于缺乏输入验证，此行为可能被滥用，以执行任意系统命令。 工作原理 该漏洞利用以下逻辑： 1. 后端接受包含以下内容的 JSON 负载： command args...

UBUNTU-CVE-2026-79776

rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /debug/pprof/cmdline endpoint unauthenticated to retrieve the full process argv including backend credentials...

AZL-96770 CVE-2026-65959 affecting package vitess 19.0.4-12

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

CVE-2026-65959

In Vitess 24.0.2 and earlier, the /debug/vrlog endpoint in vrlog.go calls vrlogStatsHandler() without acl.CheckAccessHTTP(r, acl.DEBUGGING), unlike comparable debug endpoints. A remote attacker reaching the vttablet debug HTTP port can stream live VReplication SQL statements and bound application...

CVE-2026-65959 Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

CVE-2026-65959 Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

EUVD-2026-61106

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

CVE-2026-75053

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...

CVE-2026-74799

SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod. Attackers can access /debug/pprof/heap and related endpoints to extract in-memory secrets including AccessAuthCode and AI provider...

CVE-2026-74799

SiYuan (note-taking app) before version 3.7.4 registers Go net/http/pprof debug endpoints (e.g., /debug/pprof/heap, goroutine dumps) without authentication whenever the --mode flag is not exactly prod. An unauthenticated network attacker can request these endpoints to extract in-memory secrets, i...

GO-2026-5675 Unauthenticated admin token disclosure via /debug/vars in github.com/dgraph-io/dgraph

The /debug/vars endpoint in Dgraph Alpha discloses the administrator's authentication token without requiring authentication. This allows an unauthenticated remote attacker to obtain the token and gain full administrative access to the Dgraph cluster...

CVE-2026-58658

GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and /debug endpoints on the worker port...

CVE-2026-58658

GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and /debug endpoints on the worker port...

PT-2026-60247

GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitive inference logs and modify worker configuration by exploiting unprotected /serveLogs and /debug endpoints on the worker port...

CVE-2026-30778

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue...

CVE-2026-40173

Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpoint is registered on the default mux and reachable without authentication, exposing the full process command line...

CVE-2026-35906

An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via supplying a crafted HTTP query string...