CVE-2026-73309

CVE-2026-73309: Empty OAuth2 credentials bypass XenForo before 2.3.13 can skip OAuth2 client-secret and PKCE verification when an empty string reaches the token endpoint. What happens The endpoint checks whether clientsecret and codeverifier keys exist, then performs the comparisons only when the...

CVE-2024-49138-SOC-Investigation

CVE-2024-49138 Exploitation Investigation Platform: LetsDefend SOC Training Environment Alert: SOC335 - CVE-2024-49138 Exploitation Detected Category: Privilege Escalation | Malware Analysis | Incident Response Status: Investigation Completed ✅ Overview In this investigation, I worked on an alert...

Project-CVE-2026-33017

CVE-2026-33017 Langflow Script — Code Explanation coded by: Xer0TLabs x Persephrak Decentralized Syndicate Purpose of this document This document is a high-level explanation of the supplied Python program for review, incident-response, and defensive analysis. It intentionally does not include...

CVE-2026-19632

TranslatePress Password Reset Link Disclosure to Administrator Account Takeover CVE: CVE-2026-19632 | CVSS: 9.8 Critical Unauthenticated account-takeover via TranslatePress plugin for wordpress. Time from CVE publication to working Day-One PoC: 5 hours, 9 minutes, 40 seconds Up to and including...

CVE-2026-42228

GHSA-f77h-j2v7-g6mw — n8n Unauthenticated Chat Execution Hijacking CVE: CVE-2026-42228 Severity: High Affected: n8n 1.123.32 Fixed in: n8n 1.123.32 / 2.17.4 / 2.18.1 Vulnerability Summary chat-service.ts :: startSession accepts an executionId from the WebSocket query string and only checks that t...

CVE-2026-39987-Lab

CVE-2026-39987 — marimo Pre-Auth Terminal WebSocket RCE Lab Local-only Docker lab for reproducing and understanding CVE-2026-39987 in marimo. This project compares a vulnerable marimo service with a patched marimo service side-by-side, then demonstrates the difference using a least-harm proof...

CVE-2026-27944

CVE-2026-27944 A proof of concept script for CVE-2026-27944, a critical exploit allowing nginx-ui backups to be decrypted DISCLAIMER This Proof of Concept is for educational and ethical security testing purposes only. It was developed to demonstrate the technical root cause of CVE-2026-27944 as...

cve-2026-60004

CVE-2026-60004 — Gitea = 1.27.0 Pre-Auth Remote Code Execution Description CVE-2026-60004 is a critical vulnerability CVSS 9.8 in Gitea that allows unauthenticated remote code execution via the /api/v1/repos/owner/repo/diffpatch endpoint. Tools 1. Detector detector.py Detects whether a Gitea...

CVE-2026-29000-pac4j-jwt

pac4j-jwe-forge CVE-2026-29000 Proof-of-concept for CVE-2026-29000. Targets pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3. The vulnerability is straightforward: the library accepts a PlainJWT unsigned, alg=none as long as it's wrapped inside a valid JWE. Since the server exposes its RSA...

CVE-2026-7671

CVE-2026-7671 - Fuerza bruta de OTP en Tornet Scooter Resumen Restricción inadecuada de intentos de autenticación excesivos CWE-307 en la aplicación móvil Tornet Scooter 4.75 en Android. Detalles El endpoint /TwoFactor no implementa limitación de velocidad ni bloqueo. Un OTP de 4 dígitos 0000-999...

CVE-2026-26336-PoC

CVE-2026-26336 — Alfresco Share Unauthenticated File Read Overview Alfresco Share exposes a /share/page/resource/ endpoint used to serve static resources. In vulnerable versions, this endpoint does not properly restrict path traversal, allowing an unauthenticated attacker to read arbitrary files...

CVE-2026-96747

A flaw was found in pymongo. When client-side field-level encryption is configured, the driver misinterprets Key Management Service KMS endpoint addresses ending in '.sock' as local Unix domain socket files rather than remote network hosts. An authenticated database user with permission to modify...

PoC-CVE-2026-23744

PoC-CVE-2026-23744 Ejecución Remota de Código en MCPJam Inspector Referencia https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...

CVE-2026-48072

Docmost , an open-source collaborative wiki and documentation software, is vulnerable to a path traversal flaw in versions prior to 0.80.1 . The public avatar and logo image endpoints fail to confine file path segments to the intended directory, allowing an unauthenticated attacker to traverse ou...

CVE-2026-48072 Docmost: Public image fileName path traversal leads to unauthorized local file read

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-97321 YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection

A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/goview/GoViewDataServiceImpl.java of the component GoVie...

CVE-2026-97321

The YunaiV/zhijiantianya ruoyi-vue-pro software (up to version 2026.08) contains a SQL injection vulnerability in the GoView Data Endpoint component. Specifically, the GoViewDataServiceImpl.getDataBySQL function in the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/...

EUVD-2026-86388

A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/goview/GoViewDataServiceImpl.java of the component GoVie...

CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...