FatPipe WARP/IPVPN/MPVPN - Authorization Bypass

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain a missing authorization caused by lack of access control in the web management interface, letting remote attackers access sensitive URLs, exploit requires no authentication. id: CVE-2021-27858 info: name:...

CVE-2026-54686-poc

CVE-2026-54686: Warp DCS Lifecycle Hook Spoofing PoC 日本語版はこちら Description This repository contains a safe local Proof of Concept for CVE-2026-54686 , based on Warp's public advisory GHSA-9w2v-jhww-vm85. Before the patched release, Warp accepted certain state-mutating DCS lifecycle hooks from the...

CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 Command injection via unsanitized warp:// URI scheme handler. Full writeup at 0day.gg. Summary Property| Value ---|--- CVE| CVE-2024-41997 Vulnerability| Command Injection CWE-77 Target| Warp Terminal macOS Affected| v0.2024.07.16.08.02 Impact| Arbitrary command...

CVE-2026-48732-poc

CVE-2026-48732: Warp Remote SSH cwd Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-48732 , a high severity OS Command Injection vulnerability in Warp legacy SSH background command handling. Affected Warp versions used the remote working directory cw...

PT-2026-132765

The make graphql filter and make graphql filter sync filters of juniper warp read the whole body of a POST request into memory before they parsed the body. The filters had no limit on the size of the body. A client could thus send a large body and exhaust the memory of the server. The request nee...

Cloudflare Universal SSL, WARP, and OpenNext Cloudflare Exploits

Proof of concept and exploit scripts for Cloudflare Universal SSL CAA handling, @opennextjs/cloudflare versions before 1.17.1 SSRF, and Cloudflare WARP for Windows versions before 2024.12.492.0 symlink-based file deletion. https://packetstorm.news/download/237662...

CVE-2026-67456

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-98550

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-67456

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-67456

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-67456

NVIDIA Warp is affected by a heap-based buffer overflow vulnerability. A successful exploit of this issue could result in a denial of service impact. No specific versions, root causes, or remediation details are provided in the documents. Exploitation details are not provided.

gobot (>=0.1.16, <=0.1.18), nexus-uav (>=0.1.0, <=0.6.1) potentially affected by CVE-2026-67456 via warp-lang (1.15.0)

warp-lang PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on warp-lang and may be impacted: - gobot =0.1.16, =0.1.0, =0.6.1 Source cves: CVE-2026-67456 Source advisory: MEND:CVE-2026-67456...

CVE-2026-67456

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-111509

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-67456: Heap-based Buffer Overflow

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service...

Exploit for CVE-2026-96512

SudoTimeWarp — CVE-2026-96512 sudo: the caller's TZ decid...

Malicious Package

Overview link-commitizen-warp-nightmare is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious code in link-gulp-warp-janus (npm)

Source: amazon-inspector cac3d1abd58eacd1aeab792f93f5e3b7927e722c82a03c0c3333f6692415fac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in link-commitizen-warp-nightmare (npm)

Source: amazon-inspector 80280704368aa87f094d2f04e18b07477de4d692a0044fa8457033b9644fa439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in levels-warp-mongodb-slides (npm)

Source: amazon-inspector f06ae7d6ff6aabf0154b5632ee77933718e1f2d084a2c285b9fb72e9b2dcdbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...