90775 matches found
CVE-2026-84918 Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3...
CVE-2026-84918
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3...
CVE-2026-84918 Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3...
EUVD-2026-107869
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3...
CVE-2026-84918
The Drupal Monobank payment API module (versions 0.0.0 through 1.0.3 ) contains an Improper Verification of Cryptographic Signature vulnerability. The root cause is the module's failure to verify the cryptographic signature of webhooks before processing payment status callbacks. This flaw allows ...
EUVD-2026-107819
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & JSON API Authentication for Drupal versions: from 0.0.0 to 3.2.0...
CVE-2026-96385 REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & JSON API Authentication for Drupal versions: from 0.0.0 to 3.2.0...
CVE-2026-96385 REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & JSON API Authentication for Drupal versions: from 0.0.0 to 3.2.0...
CVE-2026-96385 REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & JSON API Authentication for Drupal versions: from 0.0.0 to 3.2.0...
CVE-2026-96385
The REST & JSON API Authentication for Drupal module (versions 0.0.0 through 3.2.0) contains an authentication bypass vulnerability. The root cause is that the module fails to sufficiently validate authentication requirements for all API requests, which can allow an attacker to bypass the intende...
CVE-2026-13319
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project paths, from arbitrary private projects...
CVE-2026-114574
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...
bola-CVE-2023-27524
bola-CVE-2023-27524 ๐ README.md โ BOLA CVE-2023-27524 Demo Project ๐ Broken Object Level Authorization BOLA Demonstration CVE-2023-27524 Security Analysis & Fix --- ๐ Project Overview This project demonstrates a real-world Broken Object Level Authorization BOLA vulnerability and its secure...
pfsense-api-snort-file-join
abraxaslabs.tech ยท github.com/abraxas ยท @abraxasnull ยท [email protected] ยท pfsense-api-snort-file-join pfsense-api-snort-file-join Class: File read Reach: Remote pfSense Plus MIM API Netgate/pfsense-api b4acd7ca - Netgate GET /services/snort/rules/name/file takes two path parameters, both...
CVE-2025-9074-PoC-Bash
CVE-2025-9074-PoC-Bash The original PoC is: https://github.com/j3r1ch0123/CVE-2025-9074. This is new PoC in bash since not all docker containers has python installed, and mostly this should be run from inside a container. Steps From inside the container use the following to find vulnerable docker...
CVE-2024-21533-PoC-ggit
CVE-2024-21533 Argument Injection vulnerability in ggit ggit describes itself as: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on this argument...
CVE-2026-54761-poc
CVE-2026-54761: Traefik Kubernetes Gateway crossProviderNamespaces Bypass PoC ๆฅๆฌ่ช็ใฏใใกใ Description This repository contains a local Proof of Concept PoC for CVE-2026-54761 , a high severity vulnerability in Traefik's Kubernetes Gateway provider. The vulnerability affects the crossProviderNamespac...
CLEANSTART-2026-QZ41346 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
reverse-ip-new-api
reverse-ip-new-api This tool is used to perform reverse IP lookupsโ searching for all domains hosted on one IP address. Features Multi-threading Processing API Based Processing Error Handling Customize Thread Count Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Run? 1. Download...
EUVD-2026-107643
In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer REST API and cause Splunk SOAR to apply the license change. The vulnerability is possible because Splunk SOAR authenticates requests to manage the...