CVE-2026-39987

CVE-2026-39987 marimo es un notebook reactivo de Python. Antes de la versión 0.23.0, Marimo presenta una vulnerabilidad de RCE sin autenticación previa Pre-Auth RCE. root@kitploit: / | |// / / / / / / |/ |/ \ / | | | \ /| | /| //|/|/ / | | | / -----/ | |/ |/ ----- \ | |/ \ / / / / ////...

CVE-2026-39987

CVE-2026-39987 — RCE pre-autenticación en Marimo /terminal/ws root@kitploit: CVSS 4.0 : 9.3 CRITICAL CVSS 3.x : 9.8 CRITICAL CWE : CWE-306 Missing Authentication for Critical Function Fix : Marimo 0.23.0+ Affects : Marimo Solo laboratorio / pruebas autorizadas HTB, CTF, proyectos con alcance por...

cve-2026-39987

cve-2026-39987 Instalación • Uso • Ejemplos Solo estoy probando Go :D Por cierto: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended...

CVE-2026-39987-lab-or-marimo-cve-lab

Guía de Laboratorio CVE-2026-39987 Ejecución Remota de Código Pre-Autenticación mediante Bypass de Autenticación en WebSocket de Terminal Un laboratorio Docker educativo para comprender, reproducir y parchear esta vulnerabilidad crítica en marimo. Tabla de Contenidos Descripción General...

CVE-2026-39987

CVE-2026-39987 — RCE pre-autenticación en Marimo Solo con fines educativos y de investigación de seguridad autorizada. Descripción Ejecución remota de código pre-autenticada en Marimo = 0.20.4. El endpoint WebSocket /terminal/ws omite la validación de autenticación, lo que permite a un atacante n...

CVE-2026-39987

POC del Exploit CVE-2026-39987 Descripción general Este repositorio contiene un script de Prueba de Concepto POC para CVE-2026-39987, una vulnerabilidad de Ejecución Remota de Código RCE previa a la autenticación en Marimo. El exploit aprovecha un endpoint WebSocket para ejecutar comandos...

CVE-2026-63722 ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php

ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987 For Marimo 0.20.4 PoC ⚠️ This tool is int...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987 Marim...

SUSE CVE-2026-53522

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agents: POST /api/v1/terminal - createTerminal...

GHSA-JG62-J5H6-8MPQ Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS

Description The Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agents: - POST /api/v1/terminal → createTerminal terminal.go:27-67 - POST /api/v1/file → createFM fm.go:28-67 Both call rpc.NezhaHandlerSingleton.CreateStreamstreamId, ... which inserts a...

CVE-2026-53522 Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the Nezha dashboard exposes two endpoints that create long-lived WebSocket streams to monitored agents: POST /api/v1/terminal → createTerminal...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987 - Marimo Pre-Auth RCE Unauthenticated Remote...

Command Injection

Overview ajenti is a Linux & BSD web admin panel. Affected versions of this package are vulnerable to Command Injection via the /api/terminal/create endpoint. An attacker can execute arbitrary system commands by sending a specially crafted payload after authentication, potentially establishing a...

GHSA-VXW4-WV6M-9HHH OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

Previously reported via email to [email protected] on 2025-11-17 per the security policy in opencode-sdk-js/SECURITY.md. No response received. Summary OpenCode automatically starts an unauthenticated HTTP server that allows any local process—or any website via permissive CORS—to execute arbitrary...

GHSA-Q355-H244-969H Komari vulnerable to Cross-site WebSocket Hijacking

Summary WebSocket upgrader has disabled origin checking, enabling Cross-Site WebSocket Hijacking CSWSH attacks against authenticated users Details https://github.com/komari-monitor/komari/blob/bd5a6934e1b79a12cf1e6a9bba5372d0e04f3abc/api/terminal.goL33-L35 Any third party website can send request...

Komari vulnerable to Cross-site WebSocket Hijacking

Summary WebSocket upgrader has disabled origin checking, enabling Cross-Site WebSocket Hijacking CSWSH attacks against authenticated users Details https://github.com/komari-monitor/komari/blob/bd5a6934e1b79a12cf1e6a9bba5372d0e04f3abc/api/terminal.goL33-L35 Any third party website can send request...

1E Platform Security Vulnerability

1E Platform is a terminal endpoint management and automation solution from 1E. A security vulnerability exists in versions prior to 1E Platform v18.1 that stems from a command that fails to properly validate input parameters, allowing specially crafted inputs to execute arbitrary code with system...