1068 matches found
spark-rpc-stream-unauth
abraxaslabs.tech Β· github.com/abraxas Β· @abraxasnull Β· [email protected] Β· spark-rpc-stream-unauth Write-up: https://abraxaslabs.tech/research/spark-rpc-stream-unauth spark-rpc-stream-unauth Class: Privilege leftover / File read Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software...
Loom for AWS < 1.6.1 - Unauthenticated Super-Admin Access
Loom for AWS 1.6.1 contains a broken authentication caused by missing authentication for critical functions in the authentication dependency, letting remote actors obtain super-admin authority over the agent control plane, exploit requires no identity provider configured. id: CVE-2026-103956 info...
Platypus
Platypus A host management hub for fleets of Linux machines. Install the Platypus agent on every host you own; the agent dials back to your Platypus server over TLS + protobuf; from the server you get an interactive shell, file management, and network tunnelling on every managed host β through on...
CVE-2026-128065: grpc grpc-node: @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon
@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. From 1.14.0 through 1.14.1, XdsServer in @grpc/grpc-js-xds can acknowledge Route and VirtualHost resources while failing to apply their RBACPerRoute override configurations. The override parser is n...
agentic-dm-gateway
Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...
EUVD-2026-121705
pgEdge Control Plane generates pghba.conf with trust authentication for local and loopback connections...
owasp-ctf-in-a-box
OWASP CTF in a Box A self-hosted control plane for security-learning events β one box, one free GitHub org. Run it for a university, a high school, an OWASP chapter, a meetup. What this is Everything a security event needs, on one machine you control: GitHub sign-in, teams, a live leaderboard, an...
Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed
Nuclei Template CVE-2022-1388 BIG-IP iControl REST Exposed May 06, 2022 This only verifies the presence of the API by hitting the authentication endpoint This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP...
CVE-2026-125285
Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platformβs Self-Hosted Control Plane. This issue affects TIBCO Platformβs Self-Hosted Control Plane: from 1 through 1.21...
CVE-2026-125285 TIBCO Platformβs Self-Hosted Control Plane - Authentication Bypass Vulnerability
Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platformβs Self-Hosted Control Plane. This issue affects TIBCO Platformβs Self-Hosted Control Plane: from 1 through 1.21...
CVE-2026-125285
The TIBCO Platformβs Self-Hosted Control Plane is susceptible to an authentication bypass vulnerability via an alternate path or channel. This issue affects versions 1 through 1.21 . The vulnerability is associated with CWE-288 and carries a HIGH base severity score of 8.8. No specific technical ...
EUVD-2026-124395
Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platformβs Self-Hosted Control Plane. This issue affects TIBCO Platformβs Self-Hosted Control Plane: from 1 through 1.21...
DELTA
DELTA: SDN SECURITY EVALUATION FRAMEWORK What is DELTA? DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique...
sdnpwn
What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git git clone https://github.com/smythtech/sdnpwn Make...
CVE-2026-20127
π‘οΈ CVE-2026-20127 β Cisco Catalyst SD-WAN Authentication Bypass π Overview CVE-2026-20127 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN components, including controllers and management systems. A remote unauthenticated attacker can exploit improper authenticatio...
K000164203: OpenSSH vulnerability CVE-2026-35388
Security Advisory Description OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. CVE-2026-35388 Impact This vulnerability allows an attacker to establish an unintended SSH multiplexing session. There is no data plane exposure; this is a control...
CVE-2020-5902
CVE-2020-5902 F5 BIG-IP Traffic Management User Interface TMUI Remote Code Execution In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote...
conduit
Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution Β· hard budgets Β· egress governance Β· context-rot observability Β· audit-ready exports β all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...
CVE-2022-1388
CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services...
CVE-2026-125323
pgEdge Control Plane is a distributed application for managing and orchestrating Postgres databases across multiple hosts. From 0.1.0 to 0.10.1, generated pghba.conf files began with hard-coded trust entries for Unix-socket and loopback connections. Because PostgreSQL evaluates the file from top ...