CVE-2026-70352

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85424 MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...

CVE-2026-85424

MOOS core-moos (through version 10.4.0) has a missing authentication flaw in its wire protocol (MOOSDB). Unauthenticated clients can bypass the compile-time protocol string check, connect with arbitrary client names, and execute privileged operations including publish , subscribe , and DB_CLEAR (...

CVE-2026-85424 MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...

Azure AI Language Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. सिस्टम विश्लेषण Docker वातावरण से आक्रमण सतह की पहचान वातावरण में क्या चल रहा है, इससे शुरुआत करते हैं। हम सभी सक्रिय कंटेनरों की सूची बनाते हैं: root@kitploit: docker ps परिणाम: कंटेनर p1/lab10:latest चल रहा है, जो बाहरी रूप से 2 पोर्ट उजागर करता है: पोर्ट मैपिंग| प्रोटोक...

Blackash-CVE-2025-61757

🚨 CVE-2025-61757 — प्रमाणीकरण-पूर्व RCE अलर्ट 🚨 🧩 सारांश आईडी: CVE-2025-61757 उत्पाद: Oracle Identity Manager Oracle Fusion Middleware घटक: REST वेबसेवाएँ प्रभावित संस्करण: 12.2.1.4.0 और 14.1.2.1.0 गंभीरता: 🔴 गंभीर — 9.8 CVSS 3.1 प्रकाशित: 21 अक्टूबर, 2025 प्रकार: महत्वपूर्ण फ़ंक्शन के लिए गुम...

CVE-2026-47858

CVE-2026-47858 — Spring Tools live information 模式未授权 JMX 远程代码执行（PoC） English README | 漏洞公告: Spring Security Advisory | CVE Record 漏洞 ：Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 以 live information 模式 （默认开启）启动 Spring Boot 应用时，会向应用注入无认证、无 TLS、绑定全部网卡 的 JMX 远程参数。相邻网络的攻击者可以无凭据连接该 JM...

CVE-2026-34200

خادم Nhost MCP: اختراق البنية التحتية بنقرة واحدة إفادة رسمية: تم الاعتراف بهذه الثغرة ونشرها من قبل Nhost: GHSA-6c5x-3h35-vvw2 يوثق هذا المستودع ثغرة في خادم Nhost المحلي MCP. تفتقر الخدمة إلى المصادقة الواردة وتنفذ سياسة CORS متساهلة، مما يسمح بتنفيذ الطلبات غير المصادق عليها وعبر الأصول. زيارة...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Auteur Mohammed Idrees Banyamer 📍 Pays : Jordanie 📸 Instagram : @banyamersecurity Preuve de concept pour CVE-2026-26235 - Déni de service non authentifié via l'absence d'authentification dans JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Description de la vulnérabilité CVE-2026-26235 est une...

CVE-2026-39987

CVE-2026-39987 — تنفيذ التعليمات البرمجية عن بُعد قبل المصادقة في Marimo Python Notebook TL;DR ثغرة تنفيذ تعليمات برمجية عن بُعد قبل المصادقة في Marimo ، وهو دفتر ملاحظات Python مفتوح المصدر لعلوم البيانات والذكاء الاصطناعي/تعلّم الآلة. نقطة نهاية WebSocket الطرفية /terminal/ws تتجاوز التحقق من...

smart-sketcher-upload

smART Sketcher 2.0 - Contournement de l'authentification Bluetooth CVE-2026-0842 | Authentification manquante sur l'interface BLE Vue d'ensemble Le smART Sketcher 2.0 est un projecteur jouet compatible Bluetooth qui permet aux enfants de tracer des images. Il ne dispose d'aucune authentification...

CVE-2026-30824-Flowise-NVIDIA-NIM-Authentication

CVE-2026-30824 — Vérificateur et exploit de contournement d'authentification NVIDIA NIM dans Flowise Un vérificateur et exploit de preuve de concept pour CVE-2026-30824 , une vulnérabilité critique de contournement d'authentification dans Flowise qui expose les points de terminaison de l'API NVID...

PT-2026-85312

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 الوصول غير المُصادَق إلى Mobile MCP يمكن أن يعرّض بيانات شاشة Android ويوفّر قدرات تحكم عن بُعد في الواجهة عبر ADB. ⚠️ إشعار أمني هذا المستودع مخصّص لأغراض البحث الأمني المُصرَّح به، والتحقق من الثغرات، والاختبارات الدفاعية، والبيئات المختبرية الخاضعة للرقابة فقط. تم...

CVE-2026-5724

الملخص لا تفرض خدمة Temporal frontend المصادقة على استدعاءات gRPC المتدفقة streaming gRPC RPCs. سلسلة الاعتراضات المتدفقة streaming interceptor chain تحذف اعتراض التفويض authorization interceptor، مما يسمح للمتصلين غير المصادق عليهم بالوصول إلى AdminService/StreamWorkflowReplicationMessages، وهي...

CVE-2026-84840

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly availabl...

CVE-2026-84839

A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO Compliance Console. Executing a manipulation can lead to missing authentication. It is possible to launch the attack...

EUVD-2026-70254

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly availabl...

CVE-2026-84840

A missing authentication flaw in tsi-coop tsi-dpdp-cms (up to 0.5.0 ) affects the file InterceptingFilter.java within the Bootstrap Setup Endpoint . A remote, unauthenticated attacker can exploit this to achieve low integrity and availability impact (CVSS 3.1 score 6.5, Medium ). A public proof-o...