CVE-2023-43208

CVE-2023-43208 — Mirth Connect 预认证远程代码执行 在 NextGen Healthcare Mirth Connect CVSS 9.8（严重） — CVE-2023-37679 的补丁绕过 概述 Mirth Connect 在 /api/users 端点上使用 Java XStream 库反序列化 XML 负载，无需身份验证 。原始修复（CVE-2023-37679）引入了一个危险类黑名单，但通过使用 Apache Commons Lang3 中的 EventBindingInvocationHandler 结合 Commons Collections4...

CVE-2023-25194

CVE-2023-25194 https://hackerone.com/reports/1529790 Poc POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accept:...

mcpjam-cve-2026-23744-validator

MCPJam Inspector 授权安全验证器 一个针对影响易受攻击 MCPJam Inspector 部署的 CVE-2026-23744 的有界概念验证验证器。 该项目是一个独立的、非破坏性的验证工具，用于先前披露的 CVE-2026-23744。它不是原始漏洞披露或漏洞利用。 此仓库旨在供安全专业人员在验证他们拥有或已获得明确书面授权的系统时使用。 重要提示 此验证器通过使目标 MCPJam Inspector 进程执行一个固定的、非交互式的证据命令来确认暴露风险。它不提供通用的漏洞利用框架、shell、后利用工作流、持久化机制、凭据访问例程或权限提升能力。...

CVE-2026-98162

A flaw was found in the Linux kernel's Server Message Block SMB file server ksmbd. A remote attacker could cause a Denial of Service DoS by sending tree connect requests that encounter an error during response processing. Because the server fails to properly clean up and release connection...

GO-2026-6480 Mattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab connect}} command handler in github.com/mattermost/mattermost-server

Mattermost doesn't enforce administrator authorization on the setDefaultInstance call within the /gitlab connect command handler in github.com/mattermost/mattermost-server...

GO-2026-6483 Mattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret in github.com/mattermost/mattermost-server

Mattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret in github.com/mattermost/mattermost-server...

curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker...

CVE-2023-43208-EXPLOIT

CVE-2023-43208 - Mirth Connect 远程代码执行 RCE 漏洞利用 🚨 简介 📖 本仓库包含针对 NextGen Healthcare Mirth Connect 4.4.1 之前版本中一个严重漏洞的 PoC 利用代码。该漏洞编号为 CVE-2023-43208，允许攻击者在运行受影响软件版本的系统上实现未经身份验证的远程代码执行 RCE。 Mirth Connect 是一个开源的医疗集成引擎，未能正确处理反序列化数据，使其易受通过特制 HTTP 请求执行任意操作系统命令的攻击。该漏洞是在对 CVE-2023-37679（最初由 IHTeam...

CVE-2026-18825

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...

EUVD-2026-88239

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...

CVE-2026-18825 Origin validation error in the connect-xcors npm package

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...

CVE-2026-18825

The connect-xcors npm package contains an Origin Validation Error within its middleware. This flaw allows an attacker to bypass origin verification , potentially enabling the execution of cross-domain authenticated requests . The vulnerability has a CVSS 4.0 base score of 5.3 (MEDIUM) . No specif...

CVE-2026-18825 Origin validation error in the connect-xcors npm package

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to multiple Node.js modules. Vulnerability Details CVEID:CVE-2026-77037 DESCRIPTION:...

Apache Druid Kafka Connect - Remote Code Execution

The vulnerability has the potential to enable a remote attacker with authentication to run any code on the system. This is due to unsafe deserialization that occurs during the configuration of the connector through the Kafka Connect REST API id: CVE-2023-25194 info: name: Apache Druid Kafka Conne...

Ivanti Connect Secure - XXE

Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...

CVE-2026-18825: Origin Validation Error

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request...

CVE-2026-101084

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through...

CVE-2026-101084 obot before v0.21.1 Authorization Bypass via /mcp-connect

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through...

CVE-2026-101084

Versions of obot prior to v0.21.1 are vulnerable to an authorization bypass due to a failure to enforce Access Control Rules on the /mcp-connect endpoint. Any authenticated user who possesses a specific server ID can connect to restricted MCP servers . This allows attackers to bypass authorizatio...