16 matches found
CVE-2026-84700
PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...
CVE-2026-84700 Pika Unauthenticated Replication Access via Internal Protobuf Port
PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...
CVE-2026-84700 Pika Unauthenticated Replication Access via Internal Protobuf Port
PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...
CVE-2026-84700 Pika Unauthenticated Replication Access via Internal Protobuf Port
PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...
PT-2026-84579
PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...
CVE-2026-84700: Missing Authentication for Critical Function
PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...
aio-pika-rpc (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-50271 via ddtrace (0.29.0)
ddtrace PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc =1.0.0, =1.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...
aio-pika-rpc (1.1.0), datadog-lambda (0.10.0) potentially affected by CVE-2026-50271 via ddtrace (0.30.2)
ddtrace PYPI version 0.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc 1.1.0 - datadog-lambda 0.10.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...
aio-pika-rpc (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-50271 via ddtrace (0.29.0)
ddtrace PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc =1.0.0, =1.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...
aio-pika-rpc (1.1.0), datadog-lambda (0.10.0) potentially affected by CVE-2026-50271 via ddtrace (0.30.2)
ddtrace PYPI version 0.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc 1.1.0 - datadog-lambda 0.10.0 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...
Malicious code in pika (npm)
The package pika was found to contain malicious code...
MAL-2025-29251 Malicious code in pika (npm)
The package pika was found to contain malicious code...
Pika CMS <= Remote (baza_mysql.php) Disclosure Exploit
Exploit for php platform in category web applications Pika CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...
Pika CMS Local File Inclusion
Pika CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 My + Author...
Pika CMS baza_mysql.php File Disclosure
Pika CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 My + Author...
Pika CMS <= (showSource.php) Local File Inclusion
Exploit for php platform in category web applications Pika CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...