CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support 预认证RCE PoC !WARNING 此脚本仅供教育和研究目的 。未经明确许可 ，请勿将其用于任何系统。未经授权的访问或测试是非法且不道德的。使用此脚本前请阅读完整的免责声明。 概述 此脚本演示了一个影响BeyondTrust Remote Support RS 和 Privileged Remote Access PRA 的严重命令注入漏洞（CVE-2026-1731）。该问题源于与之前高调披露的 CVE-2024-12356 相同的 WebSocket 可达端点，因此是紧密相关的变体。...

CVE-2020-13935

Exploit for WebSocket Vulnerability in Apache Tomcat CVE-2020-13935 In the corresponding blog post the analysis and exploitation of the vulnerability is explained in detail. Usage Clone the repository, then build the tcdos binary. Run the program as follows to test whether a particular WebSocket...

CVE-2026-39987

CVE-2026-39987 针对 Marimo 0.20.4 的 PoC ⚠️ 本工具仅用于教育目的和授权安全测试。创建者不对任何未经授权或非法使用负责。使用风险自负。 ⚠️ 信息： CVE-2026-39987 是 Marimo（0.23.0 之前的版本）中的一个严重的预认证远程代码执行（RCE）漏洞。 原理： /terminal/ws 端点未进行任何身份验证即被暴露。 位于： marimo/server/api/endpoints/terminal.py root@kitploit: @router.websocket"/ws" async def...

CVE-2026-17627

IBM Langflow OSS versions 1.0.0 through 1.10.2 are affected by an improper authorization flaw (CWE-639) in the voice-mode WebSocket endpoint . The endpoint authenticates the connecting user and validates the presence of a personal OpenAI API key, but performs no authorization check to verify the ...

CVE-2026-39987

CVE-2026-39987 - Marimo Pre-Authentication RCE CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting Marimo, a reactive Python notebook environment. The vulnerability exists in Marimo's terminal WebSocket endpoint: root@kitploit: /terminal/ws The endpoi...

CVE-2026-42228

GHSA-f77h-j2v7-g6mw — Secuestro de ejecución de chat no autenticado en n8n CVE: CVE-2026-42228 Severidad: Alta Afectado: n8n 1.123.32 Corregido en: n8n 1.123.32 / 2.17.4 / 2.18.1 Resumen de la vulnerabilidad chat-service.ts :: startSession acepta un executionId de la cadena de consulta del...

CVE-2026-5173

🦊 CVE-2026-5173：GitLab WebSocket 未授权方法执行 PoC 🛠️ 概述 CVE-2026-5173 允许低权限的已认证攻击者通过 GitLab 的 WebSocket（/-/cable）端点调用受限的后端方法，尤其是通过 GraphqlChannel。 这可能导致敏感数据泄露 （高机密性）以及有限的未授权操作。 受影响版本 GitLab CE/EE：16.9.6 至 18.8.8 18.9 早于 18.9.5 18.10 早于 18.10.3 已修复版本 ：18.8.9 • 18.9.5 • 18.10.3 ⚡ 功能特性 简洁现代的 Python 3 PoC...

CVE-2026-39987-Lab

CVE-2026-39987 — Laboratorio de RCE por WebSocket de Terminal Pre-Auth en marimo Laboratorio Docker solo-local para reproducir y comprender CVE-2026-39987 en marimo. Este proyecto compara un servicio marimo vulnerable con un servicio marimo parcheado lado a lado, y luego demuestra la diferencia...

CVE-2026-39987

⚠️ CVE-2026-39987 — marimo =0.23.0" 官方...

CVE-2025-61164

A flaw was found in Cohere North AI. This vulnerability allows for an information leak through its WebSocket Endpoint. A remote attacker could exploit this to gain unauthorized access to sensitive data. Mitigation Disable the affected WebSocket endpoint in the service configuration, or restrict...

CVE-2026-39987

CVE-2026-39987 Exploit POC Overview This repository contains a Proof-of-Concept POC script for CVE-2026-39987, a pre-authentication Remote Code Execution RCE vulnerability in Marimo. The exploit leverages a WebSocket endpoint to execute arbitrary commands on the target system. Vulnerability Detai...

CVE-2026-37006

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

CVE-2026-37006

gpt-researcher v0.14.7 and before is affected by a vulnerability in its WebSocket endpoint that allows an unauthenticated remote attacker to achieve code execution by supplying malicious Model Context Protocol (MCP) configurations . The CNA-assigned CVSS 3.1 score is 9.8 (Critical) with a vector ...

CVE-2026-37006

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

CVE-2025-61164

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...

EUVD-2025-210785

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...

CVE-2025-61164

Cohere North AI v1.1.5 was found to contain an information leak via its WebSocket Endpoint . The vulnerability requires no authentication and is exploitable over the network with low complexity, resulting in a high impact on confidentiality with no integrity or availability impact (CVSS 3.1 score...

PT-2026-73058

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description An authentication bypass exists in the WebSocket endpoint due to differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987 Marim...

CVE-2026-63747

SurrealDB versions before 3.1.0 contain a denial of service vulnerability in the RPC use handler that panics when db is set without a namespace. Unauthenticated attackers can send a malformed WebSocket message to the /rpc endpoint to crash the server process...