CVE-2020-13937

描述 Apache Kylin 2.0.0、2.1.0、2.2.0、2.3.0、2.3.1、2.3.2、2.4.0、2.4.1、2.5.0、2.5.1、2.5.2、2.6.0、2.6.1、2.6.2、2.6.3、2.6.4、2.6.5、2.6.6、3.0.0-alpha、3.0.0-alpha2、3.0.0-beta、3.0.0、3.0.1、3.0.2、3.1.0、4.0.0-alpha 存在一个 RESTful API，该 API 在未经任何身份验证的情况下暴露了 Kylin 的配置信息，因此存在危险，因为一些机密信息条目将被披露给所有人。 如何利用...

nuclei-CiscoRV320Dump-CVE-2019-1653

Cisco 路由器配置暴露漏洞 漏洞描述 本仓库详细说明了某些 Cisco 路由器中一个漏洞的利用过程，该漏洞允许通过可公开访问的 URL 暴露 config.exp 配置文件。该文件可能包含敏感信息，包括凭据（USERNAME 和 PASSWD）、网络配置以及其他关键系统详细信息。如果可在无需身份验证的情况下访问，则可能危及设备及其所在网络的安全。 相关 CVE 该漏洞可能涉及 CVE-2003-1567 和 CVE-2019-1653，两者均与 Cisco 设备中配置文件的未授权暴露有关，不过仍需调查具体设备和固件是否适用于这些 CVE。 逐步利用指南 该过程使用 Shodan...

CVE-2024-9014

CVE-2024-9014 - pgAdmin 4 OAuth2 认证绕过利用工具 本仓库包含用于检测和利用 pgAdmin 4 中 CVE-2024-9014 漏洞的工具。该漏洞允许攻击者绕过 OAuth2 认证并访问敏感资源。 工具 1. cve20249014check.py 该脚本通过检查目标系统的 pgAdmin 4 安装并查找暴露的 OAuth2 配置，来判断其是否存在 CVE-2024-9014 漏洞。 用法 python3 cve20249014check.py --url --proxy --output --url: 要检查的单个目标 URL（例如...

Open WebUI < 0.9.5 - Information Disclosure

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. id: CVE-2026-45397 info: name: Open...

CVE-2020-13937

CVE-2020-13937 1.漏洞描述： Apache Kylin有一个restful api会在没有任何认证的情况下暴露配置信息。 2复现 有漏洞对比 无漏洞对比 编写poc 验证正确单个url ：pocsuite -r CVE-2022-26134.py -u url 验证错误单个url：pocsuite -r CVE-2022-26134.py -u url 批量扫描：pocsuite -r CVE-2022-26134.py -u url.txt 3.脚本代码 from collections import OrderedDict from pocsuite3.api...

CVE-2026-100418

The software Flame through 2.4.0 contains an information exposure vulnerability within the unauthenticated GET /api/config endpoint. The root cause is a lack of field redaction, allowing the endpoint to return the entire configuration object. Attackers can send a single unauthenticated request to...

CVE-2026-76706 Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, whic...

CVE-2026-76706 Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, whic...

CVE-2026-90446 Server-Side Request Forgery in Malcolm

An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents. This allows an authenticated attacker to substitute an arbitrary backend...

CVE-2026-89175 Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

PT-2026-89798

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

CVE-2026-76963

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

CVE-2026-76963 Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

CVE-2026-82684

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior contain a Missing Authorization flaw that could allow an attacker to extract system credentials, configurations, or flash contents. The device is deployed in critical manufacturing and energy sectors . This CVE is part of a group of three ...

CVE-2026-82684 Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, configurations, or flash contents...

CVE-2026-84676

Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2026-84658

Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier uses the @DataBoundConstructor annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to read that configuration...

EUVD-2026-69723

WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors. Attackers can send an unauthenticated GET request to plugin/MobileManager/getConfiguration.json.ph...

PT-2026-84624

The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission handler, allowing unauthenticated users to disclose notification recipient addresses, confirmation redirect targets and...

Linux Distros Unpatched Vulnerability : CVE-2026-75329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Netty configuration distribution service port 8283 of super-diamond-server = 1.3.3 has no authentication mechanism. Attackers can directly obtain the full...