CyberPower - Missing Authentication

An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. id: CVE-2024-32735 info: name: CyberPower - Missing Authentication author: DhiyaneshDK severity: critical description: | An issue regarding missing authentication for certai...

SAP_EEM_CVE-2020-6207

CVE-2020-6207 के लिए PoC SAP Solution Manager में लापता प्रमाणीकरण जाँच यह स्क्रिप्ट SAP EEM सर्वलेट tcsmdagentapplicationeem में लापता प्रमाणीकरण जाँचों की जाँच और शोषण करने की अनुमति देती है, जो SAP Solution Manager से जुड़े SAP SMDAgents पर RCE की ओर ले जाती हैं। मूल खोज: Pablo Artuso Yvan...

papercut-toolkit

Kit de Défense PaperCut CVE-2026-81578 + CVE-2026-82078 Un kit défensif pour vérifier et comprendre l'exposition aux vulnérabilités d'exécution de code à distance pré-authentification chaînées dans PaperCut : CVE-2026-81578 — Absence d'authentification pour une fonction critique CWE-306. Une...

CVE-2019-9653

CVE-2019-9653 दिनांक प्रकटीकरण: 03/11/2019 अंतिम अद्यतन: 03/15/2019 सारांश NUUO Inc. एक कंपनी है जो वीडियो-केंद्रित निगरानी समाधान प्रदान करती है। उनके पास विभिन्न ग्राहकों के लिए विभिन्न आवश्यकताओं के अनुसार कई NVR नेटवर्क वीडियो रिकॉर्डर उत्पाद हैं। ये NVR लिनक्स एम्बेडेड वीडियो रिकॉर्डिंग सिस्...

CVE-2021-45232

Apache APISIX Dashboard अनधिकृत पहुंच भेद्यता CVE-2021-45232 FOFA क्वेरी title="Apache APISIX Dashboard" प्रभावित दायरा Apache APISIX Dashboard 2.10.1 POC: root@kitploit: IP:PORT/apisix/admin/migrate/export सुधार सुझाव नवीनतम सुरक्षित संस्करण Apache APISIX Dashboard 2.10.1 में अपग्रेड करें:...

CVE-2026-86184

Lara Dashboard before 1.3.0 is affected by an authentication bypass in the screenshot-login route. When APP_ENV is not set to production, an unauthenticated attacker can request GET /screenshot-login/{email} with any registered email address to obtain a fully authenticated session. This grants ac...

CVE-2026-86121

Cua computer-server (by Cua, GitHub: trycua/cua) versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all network interfaces by default. This allows an unauthenticated attacker to reach TCP port 8000 and execute arbitrary shell commands via ...

CVE-2026-85702

A missing authentication vulnerability exists in the _conversation function of server/backend.py (Backend Conversation API) in ramon-victor freegpt-webui , affecting commits up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Remote attackers can manipulate the model argument to bypass authentication...

EUVD-2026-71750

A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected is the function conversation of the file server/backend.py of the component Backend Conversation API. Such manipulation of the argument model leads to missing...

EUVD-2026-71749

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/init.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be...

CVE-2026-85701

ramon-victor freegpt-webui (up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc ) is affected by a missing authentication flaw in the ChatCompletion.create function within g4f/init .py (component: Authentication Check). A remote attacker can manipulate this function without valid credentials, r...

CVE-2026-85637

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function joinroom of the file core/sockets.py of the component Admin Endpoint. The manipulation results in missing authentication. The attack may be launched remotely. The exploit has been released to the...

EUVD-2026-71682

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function joinroom of the file core/sockets.py of the component Admin Endpoint. The manipulation results in missing authentication. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-85637 jofpin trape Admin Endpoint sockets.py join_room missing authentication

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function joinroom of the file core/sockets.py of the component Admin Endpoint. The manipulation results in missing authentication. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-85637

jofpin trape (versions 1.0.0/2.0) is affected by a missing authentication flaw in the join_room function within core/sockets.py of the Admin Endpoint component. An unauthenticated remote attacker can exploit this to access the admin endpoint, resulting in low confidentiality impact (CVSS 3.1 base...

CVE-2026-85636

A missing authentication vulnerability in jofpin trape 1.0.0 affects the Login Endpoint within the file core/stats.py , allowing remote attackers to manipulate the endpoint without proper authentication. The impact is a low confidentiality loss (CVSS 3.1 score 5.3 MEDIUM ; CVSS 4.0 score 6.9 MEDI...

EUVD-2026-71632

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit is publicly available and...

CVE-2026-9317

Nango before version 0.71.6 contains a missing authentication vulnerability in the runner tRPC server . The exposed start procedure does not enforce the RUNNER_SECRET_KEY environment variable, allowing an unauthenticated attacker with network access to the runner port to invoke it and achieve rem...

CVE-2026-9317 Nango < 0.71.6 Missing Authentication RCE via runner tRPC server

Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execute arbitrary JavaScript code by invoking the exposed start procedure without credentials. Attackers with network access to the runner port can send requests ...

EUVD-2026-71631

Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execute arbitrary JavaScript code by invoking the exposed start procedure without credentials. Attackers with network access to the runner port can send requests ...