CVE-2015-3224

Ruby on Rails 웹 콘솔 익스플로잇 CVE-2015-3224 이 저장소는 Ruby on Rails 4.0.x 및 4.1.x 개발자 웹 콘솔의 IP 화이트리스트 우회 취약점 을 익스플로잇하는 Python 스크립트 를 포함합니다. 이 스크립트는 취약한 서버에서 원격 코드 실행 을 가능하게 합니다. ⚠️ 면책 조항 이 스크립트는 교육 목적 및 공인된 보안 테스트 용도로만 사용하세요. 명시적 허가 없이 어떤 시스템에서도 사용하지 마십시오. 저자는 이 스크립트로 인한 오용 또는 손해에 대해 책임지지 않습니다. 📌 취약점 설명...

CVE-2022-46169

CVE-2022-46169 Cacti 블라인드 원격 코드 실행 사전 인증 면책 조항 이는 교육 목적으로만 제공됩니다. 귀하의 행동에 대해 책임을 지지 않습니다. 자신의 판단 하에 사용하세요. 설명 이 스크립트는 이 취약점을 악용하는 데 필요한 변수들을 무차별 대입합니다. 이 익스플로잇에는 다음 3가지 변수가 필요합니다: 화이트리스트에 등록된 IP 주소 올바른 hostid 매개변수 올바른 localdataids 매개변수 remoteagent.php 파일은 IP 화이트리스트로 보호됩니다. X-Forwarded-IP 헤더에서 IP...

CVE-2015-3224

CVE-2015-3224 익스플로잇 - Rails 웹 콘솔 RCE CVE-2015-3224 에 대한 익스플로잇의 JavaScriptNode.js 구현입니다. 이 도구는 취약한 버전의 web-console 젬을 실행하는 Ruby on Rails 애플리케이션을 대상으로 하며, 인증되지 않은 원격 코드 실행RCE을 허용합니다. 취약점 정보 CVE-2015-3224 는 공격자가 Rails web-console 젬의 IP 허용 목록 보호를 우회할 수 있게 합니다. web-console는 개발 중에만 사용하도록 의도된 디버깅 도구입니다...

CVE-2026-91997

evolution-api through version 2.3.7 contains a Prometheus metrics IP allowlist bypass . The root cause is an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, effectively disabling the IP whitelist. This allows unauthenticated remote attackers to acce...

EUVD-2026-78437

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...

PT-2026-91937

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP whitelist restrictions to access sensitive metrics disclosing server version,...

CVE-2026-63641

A flaw was found in MagicMirror. The Socket.IO server in MagicMirror does not properly enforce the configured IP whitelist, allowing an unauthenticated client on an adjacent network to connect directly to module Socket.IO namespaces. This bypass enables the client to dispatch arbitrary events and...

NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions

NPM: MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...

EUVD-2026-61070

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, MagicMirror applies ipWhitelist only as Express middleware, while the Socket.IO server in js/server.js is attached directly to the HTTP server without equivalent IP allowlist, origin, or namespace authentication checks...

CVE-2026-63641

MagicMirror² (open-source smart mirror platform) prior to 2.37.0 applies ipWhitelist only as Express middleware, leaving the Socket.IO server in js/server.js without equivalent IP allowlist, origin, or namespace authentication. In a non-loopback deployment relying on ipWhitelist, an unauthenticat...

GHSA-Q4W7-56HR-83RM Nginx-UI Settings API Exposes Protected Secrets

Summary The GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag is only enforced during writes via ProtectedFill in SaveSettings and is...

EUVD-2026-27140

Nginx-UI Settings API Exposes Protected Secrets...

Nginx-UI Settings API Exposes Protected Secrets

Summary The GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag is only enforced during writes via ProtectedFill in SaveSettings and is...

Nginx-UI Settings API Exposes Protected Secrets

The GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag is only enforced during writes via ProtectedFill in SaveSettings and is completely...

CVE-2026-42223

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

CVE-2026-42223

Nginx UI (nginx-ui) before version 2.3.8 exposes sensitive settings through the GetSettings API. The handler serializes all settings structs to JSON and returns them to authenticated users, while the protected:"true" tag is only enforced on writes, not reads. This leaks 40+ protected fields, incl...

CVE-2026-42223 nginx-ui: Settings API Exposes Protected Secrets

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

CVE-2026-42223

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

CVE-2026-33032

Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP Model Context Protocol integration exposes two HTTP endpoints: /mcp and /mcpmessage. While /mcp requires both IP whitelisting and authentication AuthRequired middleware, the /mcpmessage endpoi...

CVE-2026-33032

Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP Model Context Protocol integration exposes two HTTP endpoints: /mcp and /mcpmessage. While /mcp requires both IP whitelisting and authentication AuthRequired middleware, the /mcpmessage endpoi...