Flowise < 3.0.1 - Remote Command Execution

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...

conjur

Conjur Maintainability Test Coverage Conjur provides secrets management and application identity for modern infrastructure: Machine Authorization Markup Language "MAML" , a role-based access policy language to define system components & their roles, privileges and metadata A REST web service to:...

otto-support

Otto Support خادم MCP لدعم العملاء لمساعدي البرمجة بالذكاء الاصطناعي. ملف Go ثنائي واحد، مصادقة متدرجة، 19 أداة عبر 4 مستويات أدوار. مبني باستخدام mcp-go. البدء السريع الخيار أ: حاوية Docker موصى به شغّل كل شيء في حاوية معزولة. Claude Code مثبّت مسبقًا ويبدأ خادم MCP تلقائيًا. root@kitploit: Buil...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

raspberrypi-setup

Raspberry Pi Setup This Ansible playbook is designed to rapidly set up your Raspberry Pi. It's compatible with all models. It has been successfully tested on multiple models, including the Pi Zero W, Pi Zero 2W, and Pi 4B, among others. The playbook should work well on both Debian and Debian-base...

jailer

Jailer - eBPF Mandatory Access Control Warning : This project is under heavy development and is NOT ready for production use. APIs, policy formats, and behavior may change without notice. Use for testing and experimentation only. Acknowledgments Note : This is an independent implementation and is...

authz0

Authz0 एक स्वचालित प्राधिकरण परीक्षण उपकरण है। URL और भूमिकाओं और क्रेडेंशियल्स के आधार पर अनधिकृत पहुंच की पहचान की जा सकती है। URL और भूमिकाओं को YAML-आधारित टेम्पलेट के रूप में प्रबंधित किया जाता है, जिसे authz0 के माध्यम से स्वचालित रूप से बनाया और जोड़ा जा सकता है। आप एक बार बनाए/जनरेट किए ग...

bulwark

एक संगठनात्मक परिसंपत्ति और भेद्यता प्रबंधन उपकरण, Jira एकीकरण के साथ, एप्लिकेशन सुरक्षा रिपोर्ट तैयार करने के लिए डिज़ाइन किया गया। विशेषताएँ मल्टी-क्लाइंट भेद्यता प्रबंधन सुरक्षा रिपोर्ट निर्माण Jira एकीकरण टीम-आधारित भूमिका प्राधिकरण API कुंजी और प्रबंधन ईमेल एकीकरण मार्कडाउन समर्थन उपयोगकर्ता...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

rbac

PHP-RBAC v2.x PHP-RBAC هي مكتبة تفويض صلاحيات للغة PHP. توفر للمطورين تحكم الوصول المستند إلى الأدوار الهرمي من المستوى 2 وفقًا لـ NIST والمزيد، وذلك بأسرع تنفيذ حتى الآن. الإصدار المستقر الحالي: PHP-RBAC v2.0 تواصل معنا الصفحة الرئيسية: http://phprbac.net/ صفحة مشروع OWASP:...

CVE-2025-24999

CVE-2025-24999 proof of concept for CVE-2025-24999 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...

CVE-2026-40463

WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...

CVE-2026-40463

WaveSuite (Nokia) is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. An authenticated low-privilege user can load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser, resulting in a CVSS 3.1 score...

CVE-2026-40463 An Insufficient Role-based Access Control Vulnerability in WaveSuite

WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...

GHSA-962X-CCWF-8X6P Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges e.g., an unprivileged "Guest", to bypass intended access controls. An attacker can exploit these...

EUVD-2026-67810

HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by sending requests to PATCH /team/apiKey, PATCH...

CVE-2026-82279

HyperDX through version 1.10.1 fails to enforce role-based access control on team management endpoints, allowing any authenticated team member (low privileges) to perform administrative actions. Specifically, requests to PATCH /team/apiKey , PATCH /team/name , and DELETE /team/member can be used ...

CVE-2026-82245

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...

EUVD-2026-67697

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...

CVE-2026-82245

Budibase before 3.41.3 fails to enforce role-based authorization on its license management endpoints (/api/global/license/*), allowing any authenticated user with basic privileges to delete license keys or manipulate offline tokens. An attacker can thereby disable premium features and downgrade t...