125 matches found
GraphQLmap
GraphQLmap GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. Install Features and examples Dump a GraphQL schema Interact with a GraphQL endpoint Execute GraphQL queries Autocomplete queries GraphQL field fuzzing Example 1 - Bruteforce a character Examp...
CVE-2026-64861
Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.222.0, the GraphQL endpoint does not enforce restrictions on alias count, query depth, or query complexity. An attacker can send a single request containing thousand...
EUVD-2026-123664
Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.222.0, the GraphQL endpoint does not enforce restrictions on alias count, query depth, or query complexity. An attacker can send a single request containing thousand...
CVE-2026-64861
Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.222.0, the GraphQL endpoint does not enforce restrictions on alias count, query depth, or query complexity. An attacker can send a single request containing thousand...
CVE-2026-64861: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams
Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.222.0, the GraphQL endpoint does not enforce restrictions on alias count, query depth, or query complexity. An attacker can send a single request containing thousand...
PT-2026-145404
Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. Prior to version 0.222.0, the GraphQL endpoint does not enforce restrictions on alias count, query depth, or query complexity. An attacker can send a single request containing thousand...
CVE-2026-55094
A flaw was found in Taskcluster. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution. When a deployment exposes its GraphQL endpoint to anonymous access, user-supplied filter parameters are unsafely evaluated by the backend filtering library. A remote...
CVE-2026-117184
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
Exploit for CVE-2026-117184
CVE-2026-117184 ā Unauthenticated Denial of Service via GraphQ...
Traggo Server security vulnerability
Version 0.8.3 of Traggo Server contains a security vulnerability. This vulnerability arises from improper handling of specially crafted POST requests on the GraphQL endpoint, potentially leading to a denial of service...
CVE-2026-117184
Traggo server v0.8.3 is vulnerable to an unauthenticated Denial of Service (DoS) via its GraphQL endpoint. The vulnerability is caused by uncontrolled resource consumption (CWE-400) because the server lacks request body size limits and complexity limits, while the version field lacks an authentic...
EUVD-2026-114178
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
PT-2026-133626
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
CVE-2026-117184
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
CVE-2026-117184: n/a: An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via aā¦
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
EUVD-2026-90208
Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster deployments with an anonymous role that exposes the GraphQL endpoint and parses filter...
CVE-2026-55094
Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster deployments with an anonymous role that exposes the GraphQL endpoint and parses filter...
CVE-2026-55094: Improper Input Validation
Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster deployments with an anonymous role that exposes the GraphQL endpoint and parses filter...
CVE-2026-79323
Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 magefan/module-blog-graph-ql through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql...
PT-2026-57366
Name of the Vulnerable Software and Affected Versions Authorizer versions prior to 2.0.1 Description The /authorize endpoint fails to validate the redirect uri parameter against a list of allowed origins. When the response type is set to token or id token, the server appends the access token, id...