Metabase - Unauthenticated SQL Injection

Metabase contains a sql injection caused by improper sanitization of input in the '/resetpassword' database endpoint, letting remote unauthenticated attackers gain administrator access, exploit requires no special privileges. id: CVE-2026-72898 info: name: Metabase - Unauthenticated SQL Injection...

Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting

Appium = 10.7.0 contains a reflected XSS caused by unescaped reflection of throwError query parameter, comments POST field, and User-Agent header in base-driver routes, letting remote attackers execute arbitrary JavaScript, exploit requires crafted HTTP requests. id: CVE-2026-58191 info: name:...

Node.js Embedded JavaScript 3.1.6 - Template Injection

Node.js Embedded JavaScript 3.1.6 is susceptible to server-side template injection via settingsview optionsoutputFunctionName, which is parsed as an internal option and overwrites the outputFunctionName option with an arbitrary OS command, which is then executed upon template compilation. id:...

trivy-plugin-aqua

trivy-plugin-aqua Trivy plugin for integration with Aqua Security SaaS platform Usage Trivy's options need to be passed after --. Trivy receives a target directory containing IaC files Set Aqua plugin as Trivy's current default plugin by exporting an environment variable export...

whoami-project

Whoami - Privacidad y anonimato mejorados para distribuciones Linux basadas en Debian y Arch Solicitar funcionalidad | Reportar un error Acerca del Proyecto Whoami es una herramienta de privacidad y anonimato fácil de usar, diseñada para distribuciones Linux basadas en Debian y Arch. Con su...

terragoat

TerraGoat - Vulnerable Terraform Infrastructure TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find the...

terragoat

TerraGoat - Infraestructura Terraform Vulnerable TerraGoat es el repositorio Terraform "Vulnerable por Diseño" de Bridgecrew. TerraGoat es el repositorio Terraform "Vulnerable por Diseño" de Bridgecrew. TerraGoat es un proyecto de aprendizaje y formación que demuestra cómo los errores de...

esp32-wifi-penetration-tool

Herramienta de Penetración Wi-Fi para ESP32 Este proyecto presenta una herramienta universal para la plataforma ESP32 para implementar varios ataques Wi-Fi. Proporciona algunas funcionalidades comunes que se utilizan habitualmente en ataques Wi-Fi y facilita la implementación de nuevos ataques...

CVE-2026-108708

The Wukong_HRM software (through commit 186115e) is vulnerable to a missing authorization flaw (CWE-862). The root cause lies in EmployeeAspect incorrectly assigning the HR administrator role to every caller, combined with EmployeeUtil data-scope checks that return all employees. Consequently, an...

CVE-2026-108708

WukongHRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return all employees. Any authenticated low-privileged employee can read payslips, salary records, bank cards an...

CVE-2026-108708 Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil

WukongHRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return all employees. Any authenticated low-privileged employee can read payslips, salary records, bank cards an...

EUVD-2026-96700

WukongHRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return all employees. Any authenticated low-privileged employee can read payslips, salary records, bank cards an...

CVE-2026-108708 Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil

WukongHRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return all employees. Any authenticated low-privileged employee can read payslips, salary records, bank cards an...

CVE-2026-108706

The eladmin framework (up to commit 55fbf70 ) is vulnerable to a missing authorization flaw in the downloadS3Storage handler. This allows any authenticated user to retrieve stored object URLs without the necessary storage permissions by enumerating sequential IDs against the GET /api/s3Storage/do...

CVE-2026-108707

The Wukong_HRM software (through commit 186115e ) is vulnerable to an authentication bypass within the ParamAspect component. By omitting the AUTH-TOKEN header, unauthenticated attackers can access every HRM API endpoint. This allows for unauthorized HR administrator access , enabling the reading...

CVE-2026-108707 Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect

WukongHRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header. Attackers gain HR administrator access to read payslips, salary history and employee personal dat...

CVE-2026-108706 eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint

eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions. Attackers can enumerate sequential ids against GET /api/s3Storage/download/id to collect UR...

EUVD-2026-96702

eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions. Attackers can enumerate sequential ids against GET /api/s3Storage/download/id to collect UR...

EUVD-2026-96701

WukongHRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header. Attackers gain HR administrator access to read payslips, salary history and employee personal dat...

CVE-2026-108706 eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint

eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions. Attackers can enumerate sequential ids against GET /api/s3Storage/download/id to collect UR...