CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

CVE-2020-13935

Exploit for WebSocket Vulnerability in Apache Tomcat CVE-2020-13935 In the corresponding blog post the analysis and exploitation of the vulnerability is explained in detail. Usage Clone the repository, then build the tcdos binary. Run the program as follows to test whether a particular WebSocket...

CVE-2026-5173

🦊 CVE-2026-5173: GitLab WebSocket Unauthorized Method Execution PoC 🛠️ Overview CVE-2026-5173 allows a low-privileged authenticated attacker to call restricted backend methods through GitLab's WebSocket /-/cable endpoint, specifically via the GraphqlChannel. This can lead to sensitive data exposur...

CVE-2026-39987

⚠️ CVE-2026-39987 — Unauthenticated Shell in marimo 0.23.0 A reactive Python notebook tool gave attackers a full shell in one WebSocket request. 📌 Overview CVE-2026-39987 is a critical pre-auth RCE vulnerability in marimo — a popular open-source reactive notebook for Python modern Jupyter...

CVE-2026-39987-Lab

CVE-2026-39987 — marimo Pre-Auth Terminal WebSocket RCE Lab Local-only Docker lab for reproducing and understanding CVE-2026-39987 in marimo. This project compares a vulnerable marimo service with a patched marimo service side-by-side, then demonstrates the difference using a least-harm proof...

CVE-2026-39987-PoC

CVE-2026-39987 PoC Summary Marimo = 0.20.4 is affected by a pre-authentication RCE vulnerability in the /terminal/ws WebSocket endpoint. The endpoint checks the application mode and terminal support, but does not validate authentication before accepting the WebSocket connection. It then creates a...

CVE-2026-39987

CVE-2026-39987 Exploit POC Overview This repository contains a Proof-of-Concept POC script for CVE-2026-39987, a pre-authentication Remote Code Execution RCE vulnerability in Marimo. The exploit leverages a WebSocket endpoint to execute arbitrary commands on the target system. Vulnerability Detai...

CVE-2024-12356

Unauthenticated Remote Code Execution in BeyondTrust Remote Support and Privileged Remote Access via Argument Injection and a PostgreSQL String-Escape Bypass Ethical Warning: Research, educational, and authorized testing purposes only. Please do not use against systems without permission...

CVE-2026-39987

CVE-2026-39987 For Marimo 0.20.4 PoC ⚠️ This tool is intended for educational purposes and authorized security testing only. The creator is not responsible for any unauthorized or illegal use. Use at your own risk. ⚠️ Info: CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE...

CVE-2026-17627

IBM Langflow OSS (versions 1.0.0–1.10.2) is affected by an improper authorization flaw (CWE-639) in its voice-mode WebSocket endpoint . The endpoint authenticates the connecting user but performs no check to verify that the user is permitted to access the specified flow identifier. In a multi-use...

CVE-2026-39987

CVE-2026-39987 - Marimo Pre-Authentication RCE CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting Marimo, a reactive Python notebook environment. The vulnerability exists in Marimo's terminal WebSocket endpoint: root@kitploit: /terminal/ws The endpoi...

Security Bulletin: Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint

Summary Langflow provides a voice-mode feature through a WebSocket API endpoint that accepts a flow identifier as a URL path parameter and uses it to retrieve the target flow description and persist conversation messages against that flow. The endpoint authenticates the connecting user's identity...

CVE-2026-42228

GHSA-f77h-j2v7-g6mw — n8n Unauthenticated Chat Execution Hijacking CVE: CVE-2026-42228 Severity: High Affected: n8n 1.123.32 Fixed in: n8n 1.123.32 / 2.17.4 / 2.18.1 Vulnerability Summary chat-service.ts :: startSession accepts an executionId from the WebSocket query string and only checks that t...

CVE-2025-61164

A flaw was found in Cohere North AI. This vulnerability allows for an information leak through its WebSocket Endpoint. A remote attacker could exploit this to gain unauthorized access to sensitive data. Mitigation Disable the affected WebSocket endpoint in the service configuration, or restrict...

CVE-2026-37006

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

CVE-2026-37006

gpt-researcher v0.14.7 and before is affected by a vulnerability in its WebSocket endpoint that allows an unauthenticated remote attacker to achieve code execution by supplying malicious Model Context Protocol (MCP) configurations . The CNA-assigned CVSS 3.1 score is 9.8 (Critical) with a vector ...

CVE-2026-37006

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

CVE-2025-61164

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...

EUVD-2025-210785

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...

CVE-2025-61164

Cohere North AI v1.1.5 was found to contain an information leak via its WebSocket Endpoint . The vulnerability requires no authentication and is exploitable over the network with low complexity, resulting in a high impact on confidentiality with no integrity or availability impact (CVSS 3.1 score...