CVE-2026-24055-OAuth-Langfuse

CVE-2026-24055 — Unauthenticated Slack OAuth Install in Langfuse Đồ án môn Bảo mật Web và Ứng dụng — Nhóm 06, lớp NT213.Q21.ANTT 📌 Tóm tắt Dự án tái hiện lại reproduce một lỗ hổng bảo mật thực tế đã được công bố CVE-2026-24055 trên nền tảng Langfuse — một endpoint OAuth cho phép kẻ tấn công chiếm...

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

CVE-2026-12215

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

EUVD-2026-75928

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

routers-exploit

라우터에서 발견된 PoC 및 취약점이 포함된 오픈소스 저장소 TP LINK TL-WR849N - 원격 명령 실행 PoC CVE-2020-9374 - TP LINK TL-WR849N - 원격 명령 실행 PoC root@kitploit: 페이로드: "$ls" TP LINK TL-WR849N - 인증 우회: 펌웨어 및 구성 업데이트 TP LINK TL-WR849N - 원격 명령 실행 PoC 페이로드: curl -X GET -H "Referer: http://192.168.0.1/mainFrame.htm"...

CVE-2026-78374 Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha when no captcha plugin is enabled and has no rate limitin...

EUVD-2026-75386

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha when no captcha plugin is enabled and has no rate limitin...

CVE-2026-78374 Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha when no captcha plugin is enabled and has no rate limitin...

CVE-2025-10352-POC

CVE-2025-10352 POC - 관리자 계정 생성 🛠️ CVE-2025-10352에 대한 POC: Melis Platformmelis-core의 인증되지 않은 엔드포인트로, 특정 관리자 엔드포인트에 조작된 HTTP 요청을 보내 관리자 계정을 생성할 수 있습니다. 🔗 참고 자료 📄 MITRE의 CVE-2025-10352 📄 INCIBE스페인 국립 사이버보안 연구소의 Melis Platform 경고 📄 PoC: CVE-2025-10352-POC.txtBurp에서 내보낸 원시 HTTP 요청 🚀 설명 이 PoC는 melis-cor...

CVE-2026-28766

CVE-2026-28766 Отсутствие аутентификации: конечная точка учетной записи пользователя Поле| Значение ---|--- CVE| CVE-2026-28766 Серьезность| Критический 9.3 Вектор CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N Слабость CWE| CWE-306: Отсутствие аутентификации для критической функции Затронуты...

CVE-2026-43914-PoC

CVE-2026-43914 — Vaultwarden 이메일 2FA 무차별 대입brute-force 보호 우회 CVE-2026-43914 에 대한 개념 증명PoC: 이메일 2FA 가 활성화된 경우, Vaultwarden의 로그인 무차별 대입 보호는 인증되지 않은 POST /api/two-factor/send-email-login 엔드포인트를 통해 완전히 우회될 수 있으며, 이 엔드포인트는 무제한 마스터 비밀번호 오라클 역할을 합니다. 영향을 받는 버전: Vaultwarden 1.35.4 중요성 Vaultwarden은 가장 널리...

EUVD-2026-72561

knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicl...

CVE-2026-86452

MISP versions ≤2.5.45 are affected by a vulnerability in unauthenticated mail endpoints, specifically the forgot password-reset and API-access request paths. The root cause is the absence of input length bounds, format validation, and rate limiting on these anonymous request paths, allowing an at...

CVE-2026-75430

PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...

CVE-2026-85581

SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifiers without size limits or authentication. Attackers can send repeated requests with unique identifiers to exhaust proces...

CVE-2026-85581

SiYuan versions prior to v3.8.2 are affected by a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint. The endpoint accepts and retains attacker-controlled process identifiers without size limits or authentication, allowing an attacker to send repeated requests with...

EUVD-2026-71612

PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...

EUVD-2026-70392

WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables per-video visibility checks when a programid parameter is supplied. Attackers can enumerate playlist identifiers and retrieve unlisted and group-restricted videos by requesting...

CVE-2026-15232

The MotoPress Appointment Booking WordPress plugin before 2.4.8 does not perform an authorization or ownership check when handling a user-supplied booking identifier on an unauthenticated endpoint, allowing unauthenticated attackers to permanently delete other users' reservations. This is an...

CVE-2026-82641 Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...