Cve-2026-39676

Cve-2026-39676 Wordpress 버전: Download Manager 3.3.5.2 제목: 인가 누락 - 인증되지 않은 IDOR 익스플로잇...

EUVD-2026-93491

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAut...

CVE-2025-49173

CVE-2025-49173 — macOS 10.9 로컬 루트 권한 상승 연구 상태: 비공식 / 연구 기반 플랫폼: macOS Mavericks 10.9 영향: 로컬 권한 상승 → 루트 심각도: 높음 로컬 이 저장소는 macOS Mavericks 10.9에 영향을 미치는 로컬 루트 권한 상승 취약점 에 초점을 맞춘 개념 증명PoC 보안 연구 프로젝트 를 포함합니다. 여기에 사용된 CVE 식별자는 비공식이며 학술적 시연 목적으로만 사용됩니다. 개요 이 연구는 레거시 macOS 시스템의 특정 오구성 및 권한 부여 처리 조건에서 로컬...

CVE-2023-22518

CVE-2023-22518 Confluence Data Center 및 Server의 부적절한 권한 부여 취약점. Atlassian은 관리자에게 Confluence의 심각한 취약점에 대해 경고했습니다. 이 취약점을 악용하면 데이터 손실로 이어질 수 있으므로, 개발사는 즉시 패치를 설치할 것을 권고합니다. 이 취약점은 데이터 유출에 사용될 수 없으며 atlassian.net 도메인으로 접근하는 Atlassian Cloud 사이트에는 영향을 미치지 않습니다. 취약점 상세 정보 Atlassian Jira 페이지 제품| 영향을 받는...

MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

Summary In affected versions, the SDK's OAuth client let the MCP server decide which authorization server received the client's OAuth credentials. Credentials were not tied to the authorization server they belong to. A malicious or compromised MCP server could name its own authorization server...

CVE-2026-63691

Dell Container Storage Modules versions prior to 1.18.0 are impacted by a Missing Authorization vulnerability within the Dell CSI Driver for PowerMax - csireverseproxy component. An unauthenticated attacker with adjacent network access could exploit this flaw to gain unauthorized access . Impacti...

EUVD-2026-93465

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

EUVD-2026-93461

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

CVE-2026-70411

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Missing Authentication for Critical Function vulnerability within the csm-authorization-tenant gRPC service (TenantService) . An unauthenticated attacker positioned on an adjacent network could exploit this flaw to ...

CVE-2026-63688

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

CVE-2026-61421

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-105797

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-privileged user to omit the top-level MCP type so tha...

Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927

취약한 Next.js 앱 - 침투 테스트 연습용 이 Next.js 애플리케이션은 CVE-2025-29927Next.js 미들웨어 인증 우회 취약점에 취약하도록 의도적으로 설계되었습니다. ⚠️ 면책 조항 이 애플리케이션은 교육 및 윤리적 해킹 목적으로만 사용됩니다. 프로덕션 환경에 배포하지 마십시오. 취약점은 의도적으로 포함되었으며, 보안 테스트 및 연습 용도로 사용됩니다. 취약점 세부 정보 CVE ID: CVE-2025-29927 설명: Next.js 미들웨어 인증 우회 취약점으로 인해 인증되지 않은 사용자가 보호된 경로에 접근...

CVE-2026-61421

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-93437

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-61421

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Use of Hard-coded Cryptographic Key (CWE-798) in the karavi-authorization component's JWT authentication. An unauthenticated remote attacker who knows the publicly available signing secret can forge authentication t...

CVE-2026-25197

CVE-2026-25197: 사용자 제어 키를 통한 인증 우회 IDOR 권고 필드| 값 ---|--- CVE| CVE-2026-25197 ICSA| ICSA-26-055-03 업데이트 A CVSS 3.1| 9.1 심각 벡터| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-639 사용자 제어 키를 통한 인증 우회 연구자| Michael Groberman — Gr0m 게시일| 2026-04-02 업데이트 A 제품 필드| 값 ---|--- 벤더| Gardyn 제품| Gardyn Ho...

linux-kernel-codex-harness-v2

Kernel Codex Harness v2 한국어 | English 研究ツール · オリジナルインポート: 2026年4月3日 · v2 ドキュメント改訂: 2026年7月11日 外部シグナル: 注意配分から来歴認識型トリアージへ 再現可能な観測値を使ってモデルの注意を導き、その後リポジトリの来歴を使ってレビューキューの整理を行う——証明を主張するためではない。 プロジェクト系統— Kernel Codex Harness v1 · 注意配分 → Kernel Codex Harness v2 · 来歴認識型トリアージ プロジェクトステータス...

CVE-2026-63688

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

CVE-2026-63688

Dell Container Storage Modules (CSM) versions prior to v1.18.0 are vulnerable to a Missing Authentication for Critical Function flaw in the csm-authorization-storage gRPC server . An unauthenticated remote attacker can exploit this to gain unauthorized access to storage backend administrator cred...