CKAN DataStore SQL Search - SQL Injection

CKAN, an open-source data management system used for powering open data portals, contains an unauthenticated SQL injection vulnerability in the datastoresearchsql API endpoint. id: CVE-2026-42031 info: name: CKAN DataStore SQL Search - SQL Injection author: theamanrawat severity: high description...

HoneySAP

HoneySAP: SAP Low-interaction honeypot Version 0.2.1.dev0 unreleased Overview HoneySAP is a low-interaction research-focused honeypot specific for SAP services. It's aimed at learn the techniques and motivations behind attacks against SAP systems. Features low-interaction honeypot for SAP service...

GeoServer OGC Filter - SQL Injection

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 Scanner SQL Injection Scanner untuk CKAN DataStore Tools ini digunakan untuk mendeteksi dan memvalidasi kerentanan CVE-2026-42031 SQL Injection pada platform CKAN DataStore . 📋 Fitur ✅ 8 Query Validasi otomatis database, tabel, kolom, dll. ✅ Multi-target scanning support domain &...

ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

Summary The MCP Apps UI resource an interactive DataStore table rendered in the host's webview/iframe communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''. Any window/frame able to...

ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

The MCP Apps UI resource an interactive DataStore table rendered in the host's webview/iframe communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''. Any window/frame able to reach th...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2026-96749 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2026-96749...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2026-88029 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2026-88029...

ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

CVE-2026-107177

Express Gateway versions through 1.16.11 are vulnerable to a hardcoded cryptographic key flaw. The application uses a default crypto.cipherKey named 'sensitiveKey ', which allows attackers with datastore access to decrypt stored OAuth 2.0 token secrets . Specifically, an attacker capable of readi...

EUVD-2026-94317

Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored OAuth 2.0 token secrets via the default crypto.cipherKey 'sensitiveKey'. Attackers who can read Redis can decrypt tokenEncrypted values and combine th...

CVE-2026-107177 Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens

Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored OAuth 2.0 token secrets via the default crypto.cipherKey 'sensitiveKey'. Attackers who can read Redis can decrypt tokenEncrypted values and combine th...

CVE-2026-107177 Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens

Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored OAuth 2.0 token secrets via the default crypto.cipherKey 'sensitiveKey'. Attackers who can read Redis can decrypt tokenEncrypted values and combine th...

Linux Distros Unpatched Vulnerability : CVE-2026-51773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to a...

CVE-2026-51773

A flaw was found in the VMware datastore driver of OpenStack glancestore. When an authenticated user supplies a crafted image location Uniform Resource Identifier URI pointing to an external host, the driver fails to validate the destination before forwarding requests. An attacker can exploit thi...

DEBIAN-CVE-2026-51773

An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the retryrequest function fails to validate the destination host before attaching sensitive authentication headers...

CVE-2026-51773

An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the retryrequest function fails to validate the destination host before attaching sensitive authentication headers...