SnaffPoint

SnaffPoint What is it SnaffPoint is a tool for pointesters who are in need of some sweetness in this world. It should help you find sensitive files available on SharePoint online and on shared OneDrive files for your company or your customer. How does it work There are actually 2 tools:...

CVE-2026-80099

CVE-2026-80099 PoC Unauthenticated authentication bypass and RCE exploit targeting Newfold WordPress plugins that bundle wp-module-data. Overview This tool exploits a Bearer token validation flaw in the Newfold wp-module-data module. When a WordPress site using an affected Newfold plugin is not...

CVE-2022-3172

CVE-2022-3172 demo Run poc.sh create resources chmod +x poc.sh ./poc.sh Use Curl curl https://kubernetes.default.svc/apis/metrics.k8s.io/v2beta1/ -k -H "Authorization: Bearer token"...

CVE-2025-25257

CVE-2025-25257 CVE‑2025‑25257 is a critical pre-authentication SQL injection vulnerability affecting Fortinet FortiWeb’s Fabric Connector component. It impacts FortiWeb versions: 7.6.0–7.6.3 7.4.0–7.4.7 7.2.0–7.2.10 ≤ 7.0.10 Technical Details The issue resides in the getfabricuserbytoken function...

CVE-2026-42208-Lab

CVE-2026-42208 — LiteLLM Pre-Auth SQL Injection Timing PoC Local Docker lab and least-harm PoC for CVE-2026-42208, a pre-authentication SQL injection vulnerability in LiteLLM Proxy's API key verification path. This repository demonstrates the difference between a vulnerable LiteLLM instance and a...

poc_cve-2026-42208

CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A lab environment for reproducing and detecting CVE-2026-42208 , a critical pre-authentication SQL injection vulnerability in LiteLLM where unsanitized Bearer tokens reach a raw PostgreSQL query. Vulnerability Overview Field| Details ---|-...

CVE-2026-126835 [Node.js Driver] OIDC ENVIRONMENT confusion bypasses ALLOWED_HOSTS and leaks human-callback bearer tokens

The MongoDB Node.js driver does not consistently enforce its permitted-host restriction during OIDC authentication. A bearer token produced by the embedding application's own login callback may therefore be transmitted to a host outside the configured set of permitted hosts, which may result in...

CVE-2026-126835

The MongoDB Node.js driver contains a vulnerability where it fails to consistently enforce permitted-host restrictions during OIDC authentication . Due to this oversight, a bearer token generated by an application's login callback can be transmitted to a host outside the configured set of permitt...

CVE-2026-126835 [Node.js Driver] OIDC ENVIRONMENT confusion bypasses ALLOWED_HOSTS and leaks human-callback bearer tokens

The MongoDB Node.js driver does not consistently enforce its permitted-host restriction during OIDC authentication. A bearer token produced by the embedding application's own login callback may therefore be transmitted to a host outside the configured set of permitted hosts, which may result in...

CVE-2026-125331

The HarnessRouter unified API is vulnerable to an authentication bypass in versions prior to 0.31.8 . A console not in self-hosted mode improperly attaches the server's internal key to requests containing an Authorization header before bearer validation. Service-only routes—including GET/PUT /v1/...

CVE-2026-123499 Vikunja veans before 2.7.1 Credential Leak via Repo-Controlled .veans.yml Server

Vikunja veans before 2.7.1 contains a credential exposure vulnerability that allows malicious repository authors to capture API tokens by specifying an attacker-controlled server in .veans.yml. When veans runs in an untrusted checkout, it sends VEANSTOKEN as a Bearer token, or login passwords, TO...

CVE-2026-123499

Vikunja veans versions before 2.7.1 are vulnerable to a credential exposure vulnerability. A malicious repository author can capture API tokens by specifying an attacker-controlled server in a .veans.yml file. When veans is executed in an untrusted checkout, it transmits the VEANS_TOKEN as a Bear...

CVE-2026-49272

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validatetokenrequest to check that the devicecode parameter is present and valid. A caller whose client request is accepte...

CVE-2026-112337

Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle getgraphevents function that follows @odata.nextLink without host or HTTPS validation. Attackers who influence the nextLink value can redirect manager requests to attacker-controlled endpoints,...

CVE-2026-112337 Wazuh 3.7.0 before 4.14.9 SSRF via Azure Graph nextLink Pagination

Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle getgraphevents function that follows @odata.nextLink without host or HTTPS validation. Attackers who influence the nextLink value can redirect manager requests to attacker-controlled endpoints,...

CVE-2026-112337 Wazuh 3.7.0 before 4.14.9 SSRF via Azure Graph nextLink Pagination

Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle getgraphevents function that follows @odata.nextLink without host or HTTPS validation. Attackers who influence the nextLink value can redirect manager requests to attacker-controlled endpoints,...

CVE-2026-112337

Wazuh versions 3.7.0 before 4.14.9 are vulnerable to a server-side request forgery (SSRF) vulnerability within the Azure wodle get_graph_events() function. The root cause is the lack of host or HTTPS validation when following the @odata.nextLink parameter. An attacker who can influence the nextLi...

CVE-2026-112337: wazuh: Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle…

Wazuh from 3.7.0 before 4.14.9 contains a server-side request forgery vulnerability in the Azure wodle getgraphevents function that follows @odata.nextLink without host or HTTPS validation. Attackers who influence the nextLink value can redirect manager requests to attacker-controlled endpoints,...

Linux Distros Unpatched Vulnerability : CVE-2026-49272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require...

CVE-2026-49272

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validatetokenrequest to check that the devicecode parameter is present and valid. A caller whose client request is accepte...