11745 matches found
EUVD-2026-55114
DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered...
CVE-2026-66407
CVE-2026-66407 affects DEEBOT PRO M1 and PRO K1VAC, where authentication in WebSocket communications is improperly implemented. According to sources, the WebSocket private key may be retrieved via a man-in-the-middle analysis of traffic, allowing an attacker to analyze and potentially alter commu...
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion,...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987-Poc Proof o...
PT-2026-69904
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description WebSocket handlers used for in-app terminals and log streamers authenticate sessions using the validateRequest function but fail to perform authorization. Because they do not consult the role and...
CVE-2026-72863: Improper Privilege Management
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's WebSocket handlers in-app terminals and log streamers authenticate the session but never authorize it. They establish who the user is via validateRequest and then proceed without consulting the role/permissio...
CVE-2026-66407: Use of a Broken or Risky Cryptographic Algorithm
DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered...
PT-2026-69907
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description The WebSocket handler in apps/dokploy/server/wss/terminal.ts validates sessions but fails to authorize access to the requested server. An authenticated user can access the /terminal?serverId=local...
PT-2026-69421
Name of the Vulnerable Software and Affected Versions DEEBOT PRO M1 affected versions not specified DEEBOT PRO K1VAC affected versions not specified Description An incorrect implementation of the authentication algorithm in Websocket communications allows an unauthenticated attacker to connect to...
PT-2026-69937
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS. An authenticated organization member can obtain root terminal access and read logs or statistics for restricted servers and services. This...
CVE-2026-72918: Missing Authorization
Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user stream in the WebSocket protocol allows an authenticated user to write arbitrary notification bodies because the sender ...
PT-2026-76475
Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP dependency chain, and never applies the role check that get verified user enforces on every HTTP terminal route. An account whose role is pending, meaning registered but not approved, or...
PT-2026-69987
Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 7.10.14 Rocket.Chat versions prior to 8.0.8 Rocket.Chat versions prior to 8.1.7 Rocket.Chat versions prior to 8.2.7 Rocket.Chat versions prior to 8.3.7 Rocket.Chat versions prior to 8.4.5 Rocket.Chat versions prio...
CVE-2026-72883: Missing Authorization
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts, apps/dokploy/server/wss/docker-container-terminal.ts, apps/dokploy/server/wss/docker-container-logs.ts, and apps/dokploy/server/wss/docker-stats.ts validat...
CVE-2026-66411: Incorrect Implementation of Authentication Algorithm
DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...
PT-2026-69417
Name of the Vulnerable Software and Affected Versions DEEBOT PRO M1 affected versions not specified DEEBOT PRO K1VAC affected versions not specified Description Improper authentication implementation in WebSocket communication allows a man-in-the-middle attack to retrieve the WebSocket private ke...
PT-2026-76564
Name of the Vulnerable Software and Affected Versions WeeChat versions 4.3.0 through 4.9.0 Description The relay module contains a flaw in the WebSocket permessage-deflate decompression function relay websocket inflate which lacks an upper bound on output size. An authenticated relay user can...
Pusher / Liveblocks Channel Enumeration
Uses leaked Pusher app credentials or Liveblocks secret keys to list active channels/rooms. Auto-discovers from SPA bundles. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate Pusher channels and Liveblocks rooms using leaked secrets.""" from kittysploit import from...
WebSocket / SSE Auth Probe
Tests Socket.io polling transports, SSE streams, and realtime paths for unauthenticated access, open CORS, and missing Origin enforcement. !/usr/bin/env python3 -- coding: utf-8 -- """Probe WebSocket Socket.io and SSE endpoints for weak auth and Origin checks.""" from kittysploit import from...
