OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation

OpenCTI 6.9.13 allows authentication bypass by supplying a Bearer token set to the admin user's internalid UUID instead of a valid JWT. The default admin internalid 88ec0c6a-13ce-5e39-b486-354fe4a7084f grants full admin access to the GraphQL API, effectively bypassing all authentication. id:...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

cli

CloudGraph is the free open-source universal GraphQL API and Cloud Security Posture Management CSPM tool for AWS, Azure, GCP, and K8s. With CloudGraph you get: Free and effortless compliance checks i.e. Azure CIS 1.3.1, GCP CIS 1.2, AWS CIS 1.2, AWS CIS 1.3, AWS CIS 1.4, AWS PCI 3.2.1, AWS NIST...

CVE-2025-56643

CVE-2025-56643 Public reference for CVE-2025-56643 – Wiki.js 2.5.307 JWT Session Vulnerability Description: Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the...

GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...

CVE-2024-37843-POC

CVE-2024-37843-POC POC for CVE-2024-37843. Craft CMS time-based blind SQLi Details available in blog POC curl -X POST '/api/' -H 'Content-Type:application/json' -d '"query":"query IntrospectionQuery assetsorderBy: "assets.volumeId -- \\ \n \n LIMIT 5 AS subquery\nINNER JOIN assets assets ON...

CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Nuclei Template Non-destructive Nuclei detection template for CVE-2026-19478 , a critical CVSS 9.4 unauthenticated arbitrary method invocation flaw in the GitLab GraphQL API, patched by GitLab on August 17, 2026. TL;DR GitLab's GraphQL schema supports a...

CVE-2021-4191_Exploits

CVE-2021-4191Exploits pip install python-graphql-client Usage: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Copyrights: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

CVE-2026-76078

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes acceptElectronicSignature and recordSigningEvent, both gated only by @authenticationrequired: PRESENT @sessionOnly...

CVE-2026-76080

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes Query.nodeid: with @authenticationrequired: OPTIONAL — an unauthenticated internet visitor to any published trust...

CVE-2026-63505

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.223.1, Probo's console GraphQL API is a multi-tenant GRC platform where all data is scoped to an organization. A Finding can reference a Risk via finding.riskId. Tha...

EUVD-2026-123670

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes Query.nodeid: with @authenticationrequired: OPTIONAL — an unauthenticated internet visitor to any published trust...

CVE-2026-76080

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes Query.nodeid: with @authenticationrequired: OPTIONAL — an unauthenticated internet visitor to any published trust...

EUVD-2026-123667

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes acceptElectronicSignature and recordSigningEvent, both gated only by @authenticationrequired: PRESENT @sessionOnly...

CVE-2026-76078

The Probo GRC platform, versions prior to 0.224.0 , contains a broken access control vulnerability in its public Trust Center GraphQL API. The acceptElectronicSignature and recordSigningEvent endpoints fail to verify if a signature belongs to the caller, relying solely on the client-supplied sign...

CVE-2026-76078

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes acceptElectronicSignature and recordSigningEvent, both gated only by @authenticationrequired: PRESENT @sessionOnly...

CVE-2026-76078 Probo: Broken access control in public e-signature API

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes acceptElectronicSignature and recordSigningEvent, both gated only by @authenticationrequired: PRESENT @sessionOnly...

CVE-2026-76078 Probo: Broken access control in public e-signature API

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.224.0, the public Trust Center GraphQL API exposes acceptElectronicSignature and recordSigningEvent, both gated only by @authenticationrequired: PRESENT @sessionOnly...

EUVD-2026-123665

Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.223.1, Probo's console GraphQL API is a multi-tenant GRC platform where all data is scoped to an organization. A Finding can reference a Risk via finding.riskId. Tha...

CVE-2026-63505

The Probo GRC platform (prior to version 0.223.1 ) is vulnerable to a Cross-tenant IDOR (CWE-639) in its GraphQL API. The issue stems from unvalidated foreign key references: a Finding can reference a Risk via finding.riskId without verifying that the risk belongs to the caller's organization. Be...