44 matches found
PT-2026-111670
Name of the Vulnerable Software and Affected Versions Docker Hub affected versions not specified Description An authentication bypass flaw in the management of Personal Access Tokens PAT allowed attackers to impersonate users and organizations. An attacker could create a personal account, generat...
GO-2026-6525 Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot
Obot: MCP Registry API readable without authentication in github.com/obot-platform/obot...
CVE-2026-101063
Obot versions prior to v0.23.0 contain an authentication bypass vulnerability in the MCP Registry endpoints under /v0.1/*. When registry authentication is enabled, the system fails to properly enforce it for these specific endpoints. This allows unauthenticated attackers to perform GET requests t...
CVE-2026-101063 Obot before v0.23.0 Authentication Bypass via Registry API
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...
CVE-2026-101063 Obot before v0.23.0 Authentication Bypass via Registry API
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...
CVE-2026-101063 Obot before v0.23.0 Authentication Bypass via Registry API
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...
PT-2026-69944
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy, a self-hostable Platform as a Service PaaS, contains a flaw that allows an authenticated user to execute arbitrary commands on a local or SSH-connected target server. This occurs because t...
EUVD-2016-0111
Malware in sbrugna...
EUVD-2022-0783
Malicious code in bioql PyPI...
CVE-2020-29662
In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path...
The Windows Registry Adventure #3: Learning resources
Posted by Mateusz Jurczyk, Google Project Zero When tackling a new vulnerability research target, especially a closed-source one, I prioritize gathering as much information about it as possible. This gets especially interesting when it's a subsystem as old and fundamental as the Windows registry...
Malicious code in Be.Vlaanderen.Basisregisters.PostalRеgistry.Api.CrаbImport (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisregisters.ParcеlRegіstry.Api.BackOffice.Abstractions (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisregisters.BuildingRegіstry.Apі.BackOffice.Abstraсtiоns (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisregistеrs.AddressRegistry.Api.CrabImpоrt (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisrеgisters.ParcelRegistry.Api.Extraсt (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basіsregisters.AddrеssRegistry.Aрі.Oslo (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Bаsisregisters.BuildingRеgistrу.Api.Legаcy.Abstractions (NuGet)
--- -= Per source details. Do not edit below this line.=-...