CVE-2021-45232-RCE

CVE-2021-45232 CVE-2021-45232 Apache APISIX Dashboard API 인증 없이 원격 코드 실행 버전: 2.10.1 Fofa: title="Apache APISIX Dashboard" POC: IP:PORT/apisix/admin/migrate/export...

CVE-2022-24112

Apache APISIX 2.12.x 원격 코드 실행 RCE 익스플로잇 이 Python 스크립트는 Apache APISIX 버전 2.12.0 및 2.12.1의 원격 코드 실행RCE 취약점에 대한 개념 증명PoC입니다. 이 취약점은 관리 API 내의 filterfunc Lua 필드의 오용에 있으며, 공격자가 io.popen을 통해 시스템 명령을 실행하는 임의의 Lua 코드를 주입할 수 있습니다. 명령의 응답은 ngx.say를 사용하여 HTTP 응답으로 반환됩니다. ⚠️ 면책 조항 : 이 도구는 승인된 테스트 및 교육 목적으로만...

Kong Admin <=2.03 - Admin API Access

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. id: CVE-2020-11710 info: name: Kong Admin =2.03 - Admin API Access author: pikpikcu severity: critical description: Kong Admin through 2.0.3 contains an issue v...

CVE-2025-28062

CVE-2025-28062 — ERPNext 14.82.1, 14.74.3의 CSRF 취약점을 통한 계정 탈취 📌 요약 ERPNext 14.82.1 및 14.74.3 에서 사이트 간 요청 위조CSRF 취약점이 발견되었으며, 공격자가 다음과 같은 무단 작업을 수행할 수 있습니다: 사용자 열거 계정 탈취비밀번호 재설정 임의 사용자 삭제 권한 상승역할 추가 이 취약점은 중요한 관리 API 엔드포인트에 CSRF 보호가 없기 때문에 발생합니다. 인증된 관리자가 악성 웹사이트를 방문하면 동의 없이 이러한 작업을 수행하도록 세션이 악용됩니...

CVE-2026-104415

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...

CVE-2026-104416

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...

CVE-2026-104416 Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...

CVE-2026-104416

Ghost versions 4.39.0 through 6.64.0 are vulnerable to an information disclosure vulnerability within the Admin API . This flaw allows staff users with invite viewing permissions to access secret tokens for pending staff invites. By obtaining these tokens, an attacker can accept invites for highe...

EUVD-2026-91427

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...

CVE-2026-104415

The Ghost platform (versions 0.7.2 before 6.64.0 ) contains an information disclosure vulnerability within the Admin API . Authenticated users with staff-level privileges can query the Admin API to determine the relative ordering of password hashes belonging to other staff users. While this allow...

CVE-2026-104415 Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...

EUVD-2026-91426

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...

CVE-2026-104415 Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...

kong-pwn

kong-pwn 노출된 KongAPI를 프록시처럼 사용하여 메타데이터 URL 또는 내부 URL을 획득합니다. CVE-2020-11710 - 취약점이 아니라 잘못된 구성입니다. 사용 방법 usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are required: -u/--url, -s/--ssrf 예시 $ python3 kong-pwn.py -u http://127.0.0.1:8001 + Service Added + +...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2026-104059

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer validation, CORS configuration, or Host...

CVE-2026-104059

Lektor versions 3.3.14 and 3.4.0b15 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the admin API blueprint . The root cause is a lack of CSRF tokens, Origin/Referer validation, CORS configuration, and Host allowlisting. This allows unauthenticated attackers to perform ...

EUVD-2026-91007

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer validation, CORS configuration, or Host...

CVE-2026-104059 Lektor 3.3.14 CSRF via Admin API Endpoints

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer validation, CORS configuration, or Host...

CVE-2026-104059 Lektor 3.3.14 CSRF via Admin API Endpoints

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer validation, CORS configuration, or Host...