CVE-2026-103259 n8n before 2.39.6 and 2.40.x before 2.40.1 Session Token Leak via Dynamic Credentials

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials authorize and revoke endpoints. Attackers with resolver registration capability can capture collaborators' session tokens by setting a fallback resolver to an...

CVE-2026-103259

The n8n application versions before 2.39.6 and 2.40.x before 2.40.1 are vulnerable to a session token leakage in the Dynamic Credentials authorize and revoke endpoints. Attackers who possess resolver registration capability can capture collaborators' session tokens by configuring a fallback resol...

EUVD-2026-90653

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials authorize and revoke endpoints. Attackers with resolver registration capability can capture collaborators' session tokens by setting a fallback resolver to an...

CVE-2026-103664

MISP contains a reflected cross-site scripting XSS vulnerability in the analyst data notes panel. The seed path parameter, supplied by the user via the URL, was passed directly into inline JavaScript within the rendered HTML response without any sanitization or type enforcement. An attacker who c...

CVE-2026-103321 MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image

MISP contains a stored cross-site script XSS vulnerability in the event graph preview feature. The event graph preview image field was accepted and stored without server-side validation. On the client side, the stored value was rendered into an HTML img element's src attribute via string...

CVE-2025-69516

CVE-2025-69516 - Exécution de code à distance dans Tactical RMM Ce dépôt contient un script Python qui automatise l'exploitation de la vulnérabilité SSTI CVE-2025-69516 dans Tactical RMM. Il a été testé sur la version 1.3.1. Utilisation python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id"...

CVE-2024-42009-roundcube-xss

CVE-2024-42009 — Roundcube Webmail 1.6.6 Stored XSS PoC Pour les tests de sécurité autorisés, les environnements CTF et la recherche éducative uniquement. L'utilisation de cet outil contre des systèmes que vous ne possédez pas ou pour lesquels vous n'avez pas d'autorisation écrite est illégale en...

CVE-2026-101269

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-101269

A flaw in the mechanism binding API-uploaded files to specific authentication methods allows the same session token to be used for all token-based API users. Although the protection mechanism is rendered useless , the documents state there is virtually no risk because the uploaded files are refer...

CVE-2026-101269 Incorrect session validation for API-uploaded files

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-101269 Incorrect session validation for API-uploaded files

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-102364

mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authenticate as back-office users by reusing their session tokens. Attackers can register on the public storefront and use their customer session token to access admin endpoints lacking...

CVE-2026-102364

The mall4j framework (through version 4.0 ) contains an improper authentication vulnerability because it fails to validate the sysType field in sa-token sessions. This flaw allows storefront customers to authenticate as back-office users by reusing their own session tokens. An attacker who regist...

CVE-2023-4966-POC

CVE-2023-4966-POC Proof Of Concept для уязвимости CVE-2023-4966 в NetScaler Описание Этот скрипт на Python эксплуатирует CVE-2023-4966 — критическую уязвимость в экземплярах Citrix ADC, позволяющую неавторизованным злоумышленникам утекать токены сессий. Уязвимости присвоен показатель CVSS 9.4, и...

CVE-2026-20079-checker

CVE-2026-20079 Cisco FMC Read-Only Checker Небольшая, намеренно ограниченная утилита проверки для CVE-2026-20079 — уязвимости обхода аутентификации в Cisco Secure Firewall Management Center FMC. Этот репозиторий — чекер, а не эксплойт. Он не содержит частей цепочки уязвимости, связанных с...

CVE-2024-42327_Zabbix_SQLi

🛡️ Script d'Exploitation d'Injection SQL Zabbix 7.0.0 Un script Python pour exploiter une vulnérabilité d'injection SQL authentifiée sur Zabbix 7.0.0 , prenant en charge plusieurs modes d'action incluant l'extraction de données utilisateur, la fuite de jetons de session, l'exécution de commandes à...

CitrixBleedCVE-2026-8452-2025-5777

Инструмент эксплуатации CitrixBleed — CVE-2025-5777 и CVE-2026-8452. Неавторизованное удалённое чтение памяти из Citrix NetScaler ADC и Gateway. Похищение токенов сессий администратора, извлечение хэшей nsroot, дамп секретов и обход MFA. Эксплойт на Python 3 с полным разбором памяти...

CVE-2023-31851

CVE-2023-31851 Une attaque de type Cross-Site Scripting XSS réfléchi existe dans l'interface de gestion web du Cudy LT400. La page /cgi-bin/luci/admin/network/wireless/status présente une XSS réfléchie via le paramètre iface. Les méthodes d'exploitation consistent à envoyer une requête spécialeme...

CVE-2026-100679

stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypass MFA by using their own valid ticket with another user's session token. Attackers can obtain a ticket from their own account and use it with a victim's session token to disable...

CVE-2026-100679

Versions of stoatchat prior to 0.15.5 are vulnerable to an MFA bypass due to a failure in validating that MFA tickets belong to the authenticated user. An attacker can obtain a valid ticket from their own account and utilize it in conjunction with a victim's session token. This allows the attacke...