CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - 인증되지 않은 민감 정보 노출로 인한 권한 상승 ⚠️ AI Engine = 3.1.3 — 인증되지 않은 민감 정보 노출 → 권한 상승 GitHub: Nxploited Telegram: @KNxploited 중요 공지: 제가 만든 코드를 재판매하거나 스크립트 이름을 바꾸고 저작권을 주장하며 부당 이익을 취하는 비윤리적인 사람들이 많습니다. 이 프로젝트는 Khaled Alenazi Nxploited가 공식적으로 발행한 무료 독점 프로젝트입니다. 🔎 요약 WordPress...

DiscoRape

DiscoRape DiscoRape는 python3.8로 작성된 Discord용 셀프봇입니다. 이 저장소를 포크한 원본 저장소는 여기 EC-discord 제작에서 확인할 수 있습니다. 미리보기 📝 설치/실행 pip3 install -r requirements.txt 토큰을 data/config.json에 추가하세요. python3 selfbot.py로 실행하세요. 또는 를 사용할 수 있습니다. 지원/기여 지원을 받으려면 아래 링크에서 내 지원 Discord에 가입하거나 또는 여기서 이슈/풀 리퀘스트를 열 수 있습니다...

RestroPress 3.0.0-3.2.1 - Authentication Bypass

RestroPress Online Food Ordering System WordPress plugin 3.0.0 to 3.1.9.2 contains an authentication bypass caused by exposure of user private tokens and API data via /wp-json/wp/v2/users endpoint, letting unauthenticated attackers forge JWT tokens and authenticate as other users including...

LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings Disclosure

The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the /wp-json/lottiefiles/v1/settings/ REST API endpoint. This makes it possible for unauthenticated attackers to retrieve the site...

CVE-2024-37051

CVE-2024-37051 분석 개요 CVE-2024-37051은 JetBrains의 IntelliJ 기반 IDE에서 발견된 취약점으로, GitHub 플러그인에 영향을 미칩니다. 악성 풀 리퀘스트PR를 로드하면 GitHub 액세스 토큰이 무단으로 노출될 수 있습니다. 기술적 세부 사항 이 취약점은 IDE에서 PR을 렌더링하는 과정에서 발생합니다. 악성 PR은 IDE가 GitHub 토큰을 공격자가 지정한 URL로 전송하도록 만들 수 있습니다. 패치는 호스트 검증을 추가하여 토큰이 승인된 GitHub 도메인으로만 전송되도록...

WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...

HotelDruid-CVE-2021-42948

CVE-2021-42948 HotelDruid Hotel Management Software v3.0.3 以下では、GET パラメータを介して複数のリンクにセッショントークンが露出していることが判明しており、攻撃者がユーザーのセッション ID にアクセスできる可能性があります。 アプリケーションの認証済みページにアクセスするために使用されるセッショントークンは、head.php ファイルから生成される GET メソッドを使用して渡されます。head.php...

citrix_bleed_2

Citrix Bleed 2 PoC Scanner CVE-2025-5777 이 스크립트는 가상의 취약점 "Citrix Bleed 2"CVE-2025-5777에 대한 개념 증명PoC 스캐너입니다. 과도하게 큰 요청을 보내고 응답에서 민감한 정보를 분석하여 Citrix ADC 디바이스의 잠재적 메모리 누출을 탐지하도록 설계되었습니다. 기능 다중 테스트 방법 : oversized-headers, oversized-body, randomized 테스트 방법을 지원합니다. 차등 분석 : 테스트 응답을 기준베이스라인과 비교하여 유출된 데이...

CVE-2026-54495

CVE-2026-54495 affects the OpenFeature Operator (version 0.9.2 and earlier). A tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with {NAMESPACE}/{NAME} syntax to reference a FeatureFlagSource or InProcessConfiguration in another namespace....

CVE-2026-92918

admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and replay them as bearer credentials for full user access...

EEF-CVE-2026-81632 Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

Summary Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

EUVD-2026-81382

The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker with minimal access could obtain the token to gain unauthorized access or escalate privileges within the observabili...

CVE-2026-44940

CVE-2026-44940 affects the rancher-extension-stackstate extension in SUSE Observability . The root cause is the exposure of service tokens in plain configuration or insecure locations , rather than storing them in a secure secret management mechanism. An attacker with minimal access (low privileg...

CVE-2026-44940 Service token exposure and potential privilege escalation in SUSE Observability

The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker with minimal access could obtain the token to gain unauthorized access or escalate privileges within the observabili...

CVE-2026-44940 Service token exposure and potential privilege escalation in SUSE Observability

The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attacker with minimal access could obtain the token to gain unauthorized access or escalate privileges within the observabili...

EUVD-2026-79198

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint...

CVE-2026-76672

CVE-2026-76672 affects the HPE Networking EdgeConnect SD-WAN Orchestrator . An authenticated remote attacker holding only read-only privileges can send a specially crafted request to the cache synchronization endpoint , leading to disclosure of sensitive third-party API tokens and credentials. Su...

CVE-2026-57442 MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and nodemodules path segments do not match the restriction and pass both...

CVE-2026-57442 MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and nodemodules path segments do not match the restriction and pass both...

CVE-2026-53957

Contentful MCP Server is a Model Context Protocol server for the Contentful Management API. Prior to @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5, exportspace and importspace in packages/mcp-tools/src/tools/jobs/space-to-space-migration/exportSpace.ts and...