EUVD-2026-118498

A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. The affected element is an unknown function of the file apps/desktop/src/main/local-api.ts of the component Local HTTP Service. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...

CVE-2026-123787

A weakness in the Local HTTP Service component of nexmoe VidBee (versions up to 1.3.13/2.0.2) allows for information disclosure . The issue stems from an unknown function within the file apps/desktop/src/main/local-api.ts. An attacker can launch this attack remotely by executing a manipulation. P...

sccm_sql_backdoor

sccmsqlbackdoor A proof‑of‑concept tool that implants a controlled backdoor into a Management Point stored procedure, enabling indirect SQL execution through a legitimate MP HTTP service. Installation You can install by cloning the repository and installing the dependencies. $ git clone...

cve-2015-3306

cve-2015-3306 docker image hackarada/cve-2015-3306 Intended for personal use docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...

CVE-2025-31161

CVE-2025-31161 Wrote an exploit in Go for CVE-2025-31161 affecting crushFTP. Usage ./exploit -target http://localhost:8085 -user crushadmin -action create-admin -new-admin-user username -new-admin-pass pass...

CVE-1999-0678

CVE-1999-0678: Detection & Remediation Project Author: Pham Huu Minh Date: December 2025 Project Overview This project demonstrates the complete lifecycle of a vulnerability assessment, specifically targeting the legacy Directory Traversal vulnerability CVE-1999-0678 on an Apache Web Server. The...

CVE-2025-32375

Setup for the vulnerable version. Start the vulnerable container: docker compose up Create a listener e.g. ncat: ncat -klnv 1337 Run the exploit: python3 exploit.py You should receive an HTTP request in the ncat window with the contents of the OS command id by default if everything worked as...

CVE-2019-20933

CVE-2019-20933 InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret. see https://nvd.nist.gov/vuln/detail/CVE-2019-20933 For more details PoC This PoC exploit...

CVE-2017-12635_36

Lab7-CVE-2017-12635-12636 I. SYSTEM ANALYSIS Identifying Attack Surface Starting with what is running in the environment. I list all active containers: docker ps Victim exposes a single port:5984 ⇒ I curl directly into it to probe for more information: curl -i http://192.168.3.137:5984/ Analyzing...

AZL-111523 CVE-2026-118766 affecting package botan2 2.14.0-2

Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting an OCSP request to the URI in a certificate's Authority Information Access extension. A malicious OCSP responder or an on-path attacker could redirect the client to make o...

CVE-2026-116228

A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...

CVE-2026-116228 777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication

A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...

CVE-2026-116228 777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication

A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...

CVE-2026-116228

A vulnerability exists in 777genius agent-teams-ai (up to version 2.17.10) within the Local HTTP Service component. Specifically, the doStart function in the file src/main/services/infrastructure/HttpServer.ts lacks proper authentication. This flaw allows an attacker with local access to perform ...

EUVD-2026-109633

A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...

Ilya Agent Teams authorization issue vulnerability

Versions 2.17.10 and earlier of Ilya Agent Teams contain an authorization issue vulnerability. This vulnerability stems from a lack of authentication in the doStart function within the file src/main/services/infrastructure/HttpServer.ts in the Local HTTP Service component, potentially allowing...

PT-2026-123194

A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...

EUVD-2026-107681

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-114574

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-114574 massCodeIO massCode Local HTTP Service index.ts information disclosure

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...