CVE-2026-89293

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnesti...

EUVD-2026-115729

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnesti...

CVE-2026-89293

Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 are vulnerable to a missing authorization flaw (CWE-862 , CWE-602 ). An unauthenticated attacker can perform actions reserved for authorized users, such as modifying Infrastructure settings or interacting with the authenticated M...

Azure Functions host.json Configuration Exposure Detection

Detected exposed Azure Functions host.json configuration files. The exposed metadata revealed sensitive runtime, logging, extension, and infrastructure settings that could aid attackers in understanding the application architecture. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed...

CVE-2026-28215 hoppscotch Vulnerable to Unauthenticated Onboarding Config Takeover

hoppscotch is an open source API development ecosystem. Prior to version 2026.2.0, an unauthenticated attacker can overwrite the entire infrastructure configuration of a self-hosted Hoppscotch instance including OAuth provider credentials and SMTP settings by sending a single HTTP POST request wi...