Flowise < 3.0.1 - Remote Command Execution

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

rbac

PHP-RBAC v2.x PHP-RBACは、PHP用の認可ライブラリです。開発者にNISTレベル2の階層型ロールベースアクセス制御などを、これまでで最速の実装で提供します。 現在の安定版リリース: PHP-RBAC v2.0 私たちとつながる ホームページ: http://phprbac.net/ OWASPプロジェクトページ: https://www.owasp.org/index.php/Phprbac PHP-RBACドキュメント: http://phprbac.net/docscontents.php PHP-RBAC Wiki:...

authz0

Authz0는 자동화된 권한 부여 테스트 도구입니다. URL과 역할Role 및 자격 증명Credentials을 기반으로 인가되지 않은 접근을 식별할 수 있습니다. URL과 역할은 YAML 기반 템플릿으로 관리되며, authz0를 통해 자동으로 생성 및 추가할 수 있습니다. 한 번 생성/작성된 템플릿 파일을 사용하여 여러 인증 헤더와 쿠키를 기반으로 테스트할 수도 있습니다. 🛸 주요 기능 스캔 템플릿 생성 $ authz0 new URL 포함 역할 포함 ZAP 기록 포함 URL 선택 선택한 항목을 HAR로 저장 Burp 기록 포함...

otto-support

Otto Support AI コーディングアシスタント向けのカスタマーサポート MCP サーバー。単一の Go バイナリ、階層型認証、4 つのロールレベルにわたる 19 のツール。 mcp-go で構築。 クイックスタート オプション A: Docker コンテナ（推奨） すべてを分離されたコンテナ内で実行します。Claude Code がプリインストールされており、MCP サーバーが自動的に起動します。 Build docker build -t otto-support . Run with your API key docker run -it -e...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

conjur

Conjur Maintainability Test Coverage Conjurは、現代のインフラストラクチャ向けにシークレット管理とアプリケーションIDを提供します。 マシン認証マークアップ言語（"MAML"） ：ロールベースのアクセスポリシー言語で、システムコンポーネントとそのロール、権限、メタデータを定義します。 REST Webサービス ： 人間とマシンのIDライフサイクルを管理 シークレットインフラ内のロールとデータを整理・検索 高度な権限モデルを使用してリソースへのアクセスを承認 シークレットを保存し、安全に利用可能にする クラウドツールチェーン全体の統合 ：...

CVE-2025-24999

CVE-2025-24999 CVE-2025-24999 的概念验证 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...

CVE-2026-100632 Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQuery

Parse Server is an open-source backend server. In versions = 9.0.0 and 9.10.1-alpha.8, and in versions 8.6.89, LiveQuery evaluates the protectedFields class-level permission against an incompletely resolved caller identity: the subscriber's roles are not resolved, and when a subscription does not...

PT-2026-97071

Name of the Vulnerable Software and Affected Versions IBM Concert versions 1.0.0 through 3.0.0 Description A remote authenticated attacker can access or modify unauthorized resources. This is caused by the use of wildcards in Role-Based Access Control RBAC permission definitions, which is a metho...

Ghostwriter v7.3.0-rc1

Ghostwriter Ghostwriter is an open-source platform designed to enhance offensive security operations by simplifying report writing, asset tracking, and assessment management. It offers tools for managing clients, creating a reusable findings library, and organizing the infrastructure and domains...

CVE-2026-92787: Use of Hard-coded Credentials

Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value. Attackers can obtain trusted internal identity and gain unchecked read and write...

CVE-2026-20773 Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions...

CVE-2026-20773

CVE-2026-20773 is an improper authorization flaw in PingFederate (Ping Identity), specifically in the administrative expression evaluation endpoint . A role-based access control (RBAC) deficiency allows users holding certain administrative roles to access expression testing capabilities beyond th...

CVE-2026-20773 Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions...

CVE-2026-20773: Incorrect Authorization

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions...

EUVD-2026-76746

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...

CVE-2026-90450 Incorrect Authorization in Malcolm

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

CVE-2026-90447

This ICS-CERT advisory (CSAF reference: ICSA-26-254-01) describes a privilege escalation vulnerability in a downstream service where a routing rule selects between two authentication mechanisms based on a client-supplied request header . An authenticated user possessing a shared service credentia...

Shopper: privilege escalation via improper Livewire admin component authorization

Summary Three Livewire admin components in shopper/framework latest master at commit fcd0c59, released as v2.8.0 gate state-mutating actions on the read-only viewusers permission. This is the same class as the issue Shopper fixed in v2.8.0 / PR 511 / GHSA-f946-9qp6-vgch — the PR moved most write...