CVE-2026-90543

WWBN AVideo (with the Live plugin enabled) contains a missing authentication vulnerability in plugin/Live/socketMessageLiveOwner.json.php. The script resolves the stream owner via LiveTransmition::keyExists and checks that the owner is an administrator, but performs no User::isLogged() check and ...

VanCleef

VanCleef Rancher 2.1.4 웹 파라미터 변조 CVE-2019-11881 root@kitploit: ./vancleef.rb rancherip rancherport messagetodisplay double-quoted Example: ./vancleef.rb 192.168.0.1 8080 "Rancher is outdated. Please update following the instructions at http://192.168.0.25/rancher-updating" MITRE CVE 공지...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 では、警告メッセージのインジェクションが可能です。 発見日: 2022年2月15日 影響を受けるバージョン: 9.4 POC エクスプロイト: SASLogon/csrf には "target" というパラメータが 1 つあります。 このパラメータは、ユーザーが開こうとしていた URL の警告メッセージに影響を与えます ただし、発信元が不明なため、システムはそれをブロックします。 このパラメータを変更することで、長い偽の文章を書き込み、それに気づかないユーザーに影響を与えることができます。 ペイロードの例:...

Log4j_CVE-2021-44228

Log4j 취약점은 "Log4Shell" 또는 "CVE-2021-44228"로도 알려져 있으며, Apache Log4j 라이브러리의 치명적인 보안 결함입니다. Log4j는 개발자가 애플리케이션에서 파일, 데이터베이스, 콘솔 출력 등 다양한 대상으로 메시지를 로깅할 수 있도록 하는 널리 사용되는 Java 기반 로깅 프레임워크입니다. 이 취약점은 2021년 12월에 발견되었으며, 그 심각성과 악용 가능성으로 인해 상당한 주목을 받았습니다. Log4j 2.x 버전에 영향을 미치며, 경우에 따라 이전 버전에도 영향을 미칠 수 있습니다...

CVE-2018-10933

CVE-2018-10933 시나리오 재현 및 개선 설명 root@kitploit: 이것은 CVE-2018-10933libSSH 인증 우회에 대한 교육 목적입니다. libssh 버전 0.6 이상에는 서버 코드에 인증 우회 취약점이 있습니다. 공격자는 서버가 인증을 시작하기 위해 기대하는 SSH2MSGUSERAUTHREQUEST 메시지 대신 SSH2MSGUSERAUTHSUCCESS 메시지를 서버에 제시함으로써, 어떤 자격 증명 없이도 성공적으로 인증할 수 있습니다. "patch" 폴더에는 테스트 목적으로 서버의 수정된 코드가 포함...

CVE-2026-17627

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due to improper authorization...

EUVD-2026-71466

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due to improper authorization...

CVE-2026-85667

xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers can publish malicious messages via the /webhookworktool handler and exploit unvalidated media UR...

CVE-2026-85667 xiaobei through 5.5.2 Unauthenticated Webhook Message Injection

xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers can publish malicious messages via the /webhookworktool handler and exploit unvalidated media UR...

EUVD-2026-71123

xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers can publish malicious messages via the /webhookworktool handler and exploit unvalidated media UR...

CVE-2026-85667

xiaobei through 5.5.2 fails to implement authentication or signature validation on its webhook endpoints, specifically the /webhook_worktool handler. This allows unauthenticated network attackers to inject arbitrary messages into the agent pipeline and exploit unvalidated media URL fetching to pe...

Security Bulletin: Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint

Summary Langflow provides a voice-mode feature through a WebSocket API endpoint that accepts a flow identifier as a URL path parameter and uses it to retrieve the target flow description and persist conversation messages against that flow. The endpoint authenticates the connecting user's identity...

net/textproto: golang: Golang net/textproto: Misleading error messages via input injection

A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead...

EUVD-2026-67955

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespace collision between user identifiers...

CVE-2026-18904

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespace collision between user identifiers...

CVE-2026-18904

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespace collision between user identifiers...

CVE-2026-18904

IBM Langflow OSS versions 1.0.0 through 1.11.1 are affected by an authorization bypass (CWE-639) stemming from a namespace collision between user identifiers . The public flow metadata endpoint exposes the owner's user_id, which an unauthenticated attacker can reuse as a client_id to collide with...

CVE-2026-82284

Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/chatid/history, DELETE /chat/chatid, and POST /chat/chatid/question/answer endpoints. Authenticated attackers can read other users' conversation histories including private knowledge base content, delete arbitrary...

CVE-2026-82271

R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users'...

CVE-2026-82020 Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool

Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can influence ingested message content to overwrite the credential store by bypassing sensitive-path guards that excluded the auth.json file. Attackers can craft malicious messages...