poc_cve-2026-42208

CVE-2026-42208 — LiteLLM 사전 인증 SQL 인젝션 LiteLLM에서 정제되지 않은 Bearer 토큰이 원시 PostgreSQL 쿼리에 도달하는 치명적인 사전 인증 SQL 인젝션 취약점인 CVE-2026-42208 을 재현하고 탐지하기 위한 랩 환경입니다. 취약점 개요 필드| 상세 ---|--- CVE ID| CVE-2026-42208 GHSA| GHSA-r75f-5x8p-qvmc CVSS| 9.3 치명적 — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 영향받는 버전| = 1.81.16, ...

freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

A flaw was found in FreeRDP server. This vulnerability allows unauthenticated attackers to bypass server policies that disable Remote Desktop Services over Transport Layer Security RDSTLS connections. By sending incompatible protocol requests and then completing a TLS handshake, attackers can...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - Рабочий PoC Эксплуатация утечки памяти в MongoDB - Симулированная атака R6 Полноценное доказательство концепции для CVE-2025-14847 MongoBleed Протестировано: ✅ MongoDB 7.0.5 | 14 300+ успешных эксплойтов | 4 утёкших UUID 🎯 О проекте Этот репозиторий содержит полностью...

CVE-2023-36845

CVE-2023-36845 Использование? bash cve.sh yourfile.txt Ссылки: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: Critical Pre-Authentication RCE in React Server Components Security Research byschema.cx "Control is an illusion. It's the systems we build that control us—unless we understand them first." 📋 Содержание Отказ от ответственности и правовая информация Краткое резюме Техническое...

CVE-2022-33679_Checker

Чекер CVE-2022-33679 Лёгкий чекер, который проверяет, подвержены ли учётные данные Active Directory уязвимости CVE-2022-33679 Kerberos AS-REP roast без предварительной аутентификации. Код основан на Bdenneu/CVE-2022-33679 и содержит только путь обнаружения — он никогда не пытается эксплуатировать...

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

hi CTT-Serverless-RCE-v1.0---수렴-시간-이론-강화-MCP-익스플로잇 Serverless Framework MCP 서버 CVE-2025-69256 기본 점수: 9.4/10 → CTT 향상 점수: 9.9/10 CTT 시간적 공명으로 향상된 Serverless Framework의 MCPModel Context Protocol 서버에서 발생하는 중요한 명령 주입 취약점으로, 전례 없는 신뢰성과 회피를 제공합니다. 🌀 CTT-MCP-RCE v1.0 - 수렴 시간 이론 강화 Serverless Framework...

Denial-Of-Service (DoS)

Apache Qpid Proton-J is vulnerable to denial-of-service DoS. The vulnerability is due to improper handling of type size/count values, which allows a pre-authentication attacker to trigger excessive memory allocation and potentially cause a denial of service...

CVE-2026-54088-poc

CVE-2026-54088: Инъекция команд через замену оболочки в хуке аутентификации RCE до аутентификации Английская версия Обзор Этот репозиторий содержит Proof of Concept PoC критической уязвимости внедрения команд ОС CVE-2026-54088 , присутствующей в File Browser версии = 2.63.5. Уязвимость находится ...

Security update for glib2 (moderate)

openSUSE security update: security update for glib2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21977-1 Rating: moderate References: bsc1272206 Cross-References: CVE-2026-15588 CVSS scores: CVE-2026-15588 SUSE : 5.3...

CVE-2025-14733

WatchGuard IKEv2 Scanner — CVE-2025-14733 Выявляйте устройства WatchGuard Firebox, уязвимые для CVE-2025-14733 — критической уязвимости до аутентификации в реализации IKEv2 в Fireware OS. Этот инструмент выполняет безопасное определение версии через стандартное согласование IKEv2. Он не пытается...

Denial Of Service

Apache Qpid Proton-J is vulnerable to denial of service. The vulnerability is due to unbounded symbol value caching, where the cache can grow without limit and a pre-authentication attacker can send crafted data to exhaust resources, leading to denial of service...

OPENSUSE-SU-2026:21977-1 Security update for glib2

This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206...

CVE-2026-102509

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

PT-2026-103621

Name of the Vulnerable Software and Affected Versions iperf3 versions 3.20 through 3.21 Description A pre-authentication heap buffer overflow exists in the decrypt rsa message function. This occurs because a 256-byte RSA buffer is read using a ciphertext length controlled by the attacker, allowin...

SUSE CVE-2026-67230

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither maxframesize nor logintimeout before authentication, allowing an unauthenticated client to keep a connection alive with a slow stream of small frame...

GO-2026-6541 Grafana: Pre-authentication denial of service in the public dashboard query handler in github.com/grafana/grafana

Grafana: Pre-authentication denial of service in the public dashboard query handler in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive report...

Security update for glib2

This update for glib2 fixes the following issue: CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...