CVE-2015-3224

Ruby on Rails Web Console Exploit（CVE-2015-3224） このリポジトリには、Ruby on Rails 4.0.x および 4.1.x の開発者用WebコンソールにおけるIPホワイトリストバイパス脆弱性 を悪用するためのPythonスクリプト が含まれています。このスクリプトを使用すると、脆弱性のあるサーバーに対してリモートコード実行 が可能になります。 ⚠️ 免責事項 このスクリプトは、教育目的および許可を得たセキュリティテスト専用です。 明示的な許可なくいかなるシステムに対しても使用しないでください 。...

CVE-2022-46169

CVE-2022-46169 Cacti ブラインドリモートコード実行（事前認証不要） 免責事項 これは教育目的のみです。私はあなたの行動に対して一切責任を負いません。自己責任で使用してください。 説明 このスクリプトは、この脆弱性を悪用するために必要な変数をブルートフォースします。このエクスプロイトには以下の3つの変数が必要です。 ホワイトリストに登録されたIPアドレス 正しい hostid パラメータ 正しい localdataids パラメータ ファイル remoteagent.php はIPホワイトリストによって保護されています。X-Forwarded-IP...

CVE-2015-3224

CVE-2015-3224 익스플로잇 - Rails 웹 콘솔 RCE CVE-2015-3224 에 대한 익스플로잇의 JavaScriptNode.js 구현입니다. 이 도구는 취약한 버전의 web-console 젬을 실행하는 Ruby on Rails 애플리케이션을 대상으로 하며, 인증되지 않은 원격 코드 실행RCE을 허용합니다. 취약점 정보 CVE-2015-3224 는 공격자가 Rails web-console 젬의 IP 허용 목록 보호를 우회할 수 있게 합니다. web-console는 개발 중에만 사용하도록 의도된 디버깅 도구입니다...

CVE-2026-91997

evolution-api through version 2.3.7 contains a Prometheus metrics IP allowlist bypass . The root cause is an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, effectively disabling the IP whitelist. This allows unauthenticated remote attackers to acce...

EUVD-2026-78437

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...

PT-2026-91937

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...

CVE-2026-63641

A flaw was found in MagicMirror. The Socket.IO server in MagicMirror does not properly enforce the configured IP whitelist, allowing an unauthenticated client on an adjacent network to connect directly to module Socket.IO namespaces. This bypass enables the client to dispatch arbitrary events and...

NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions

NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...

EUVD-2026-61070

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies ipWhitelist only as Express middleware, while the Socket.IO server in js/server.js is attached directly to the HTTP server without equivalent IP allowlist, origin, or namespace authentication checks...

CVE-2026-63641

MagicMirror² (open-source smart mirror platform) prior to 2.37.0 applies ipWhitelist only as Express middleware, leaving the Socket.IO server in js/server.js without equivalent IP allowlist, origin, or namespace authentication. In a non-loopback deployment relying on ipWhitelist, an unauthenticat...

GHSA-Q4W7-56HR-83RM Nginx-UI Settings API Exposes Protected Secrets

Summary The GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag is only enforced during writes via ProtectedFill in SaveSettings and is...

EUVD-2026-27140

Nginx-UI Settings API Exposes Protected Secrets...

Nginx-UI Settings API Exposes Protected Secrets

Summary The GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag is only enforced during writes via ProtectedFill in SaveSettings and is...

Nginx-UI Settings API Exposes Protected Secrets

The GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag is only enforced during writes via ProtectedFill in SaveSettings and is completely...

CVE-2026-42223

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

CVE-2026-42223

Nginx UI (nginx-ui) before version 2.3.8 exposes sensitive settings through the GetSettings API. The handler serializes all settings structs to JSON and returns them to authenticated users, while the protected:"true" tag is only enforced on writes, not reads. This leaks 40+ protected fields, incl...

CVE-2026-42223 nginx-ui: Settings API Exposes Protected Secrets

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

CVE-2026-42223

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

CVE-2026-33032

Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP Model Context Protocol integration exposes two HTTP endpoints: /mcp and /mcpmessage. While /mcp requires both IP whitelisting and authentication AuthRequired middleware, the /mcpmessage endpoi...

CVE-2026-33032

Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP Model Context Protocol integration exposes two HTTP endpoints: /mcp and /mcpmessage. While /mcp requires both IP whitelisting and authentication AuthRequired middleware, the /mcpmessage endpoi...