EUVD-2026-55971

TYPO3 CMS - Broken Access Control in Backend and Install Tool...

cve-2014-0130

== CVE-2014-0130 Test Case Payload : http://site/api/%5C../%5C../%5C../%5C../%5C../CATDIR === Netsparker Detected : https://i.imgur.com/s1vahmj.png == HackerOne 1 - newrelic.com rails directory traversal vuln by droidsec - https://hackerone.com/reports/134032 == Reference 1...

EUVD-2026-42425

Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig routes...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This is a Capture The Flag CTF styled Proof of Concept for the Next.js Middleware Authorization Bypass vulnerability CVE-2025-29927. The goal is to bypass the auth middleware and retrieve the flag from the /protected route. Vulnerabilit...

CVE-2026-82732

ash_typescript (versions 0.15.0 through before 0.18.0) contains an improper input validation flaw in AshTypescript.TypedController.RequestHandler. The handler calls Ash.Type.cast_input/3 to coerce input but never invokes Ash.Type.apply_constraints/3, rendering declared constraints (one_of, max_le...

enforcement-coverage

تغطية الإنفاذ تكتشف مسارات API التي تحمل تحكمًا في التفويض أضعف من مساراتها الشقيقة. عثرت على CVE-2026-45316 في Open WebUI من الكود المصدري وحده، دون أي معرفة مسبقة بنشرة أمنية: root@kitploit: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require...

nextjs-vulnerable-app

Next.js Authentication App This is a Next.js application that implements authentication using NextAuth.js. The app features protected routes that require users to be authenticated to access certain pages. Project Structure root@kitploit: nextjs-auth-app ├── components │ ├── Layout.js Layout...

CVE-2026-82871

ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row data. Attackers can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and...

CVE-2026-82870

ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, alter, or drop tables in other organizations' databases. Attackers can exploit missing organization-resolving guards to permanently delete tables,...

CVE-2026-82871 ToolJet before v3.16.208 Cross-Organization Data Read via Database Routes

ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row data. Attackers can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and...

EUVD-2026-68406

ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row data. Attackers can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and...

CVE-2026-82871

ToolJet versions before v3.16.208 fail to validate organization membership in database read routes. Any authenticated user can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and execute join queries to read stored data from victim organizations. T...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

CVE-2026-47101-PoC

CVE-2026-47101 — LiteLLM Privilege Escalation via /key/generate + /user/update LiteLLM v1.82.6 before v1.83.14 /key/generate endpoint allows low-privileged internaluser to request an API key with wildcard routes "/", and then elevate their own role to proxyadmin via the /user/update endpoint,...

CVE-2021-43798

CVE-2021-43798 - قراءة ملفات عشوائية في Grafana مجموعة أدوات بايثون للاختبار المصرح به لثغرة CVE-2021-43798، وهي ثغرة اجتياز مسار في Grafana يمكن أن تسمح بقراءة ملفات عشوائية دون مصادقة عبر مسارات أصول الإضافات. يحتوي هذا المستودع على: grafanapoc.py: أداة إثبات مفهوم تفاعلية لقراءة الملفات...

CVE-2025-54914-PoC

CVE-2025-54914 Azure Route Exploit Overview This is an improved implementation of the CVE-2025-54914 Azure Networking Route exploit. This version maintains the core CVE functionality while adding more features including persistence, evasion, multi-target scanning, and error handling. Features Cor...

CVE-2026-34048

CVE-2026-34048 Admin-only terminal bootstrap routes checked only for login state, which let a normal team member drive Coolify's realtime terminal backend and execute commands on team servers. Intro I found this issue while reviewing Coolify , an open-source self-hosted PaaS, with a very direct...

PT-2026-83748

Name of the Vulnerable Software and Affected Versions ToolJet versions prior to 3.16.208 Description An issue exists where organization membership is not validated in database read routes. This allows any authenticated user to access table schemas and row data belonging to other organizations. An...

CVE-2022-22947-pb-ai

CVE-2022-22947 Spring Cloud Gateway Vulnerability Verification Application This is a Spring Cloud Gateway application specifically designed to demonstrate and verify the CVE-2022-22947 vulnerability. The application uses a vulnerable version of Spring Cloud Gateway and allows arbitrary code...

CVE-2026-16061

The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its public REST routes before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks...