CVE-2026-56121_exploit

CVE-2026-56121 — Feast Registry RCE non autenticata dill.loads Esecuzione remota di codice non autenticata nel server gRPC del registry del feature store Feast. La RPC ApplyFeatureView ricostruisce un OnDemandFeatureView dal proto della richiesta. In questo modo decodifica in base64...

CVE-2026-33186

CVE-2026-33186 gRPC-Go RBAC Authorization Policy Bypass via Missing :path Slash Auth Bypass Beschreibung Das authz-Paket in google.golang.org/grpc implementiert eine RBAC-Autorisierung auf SDK-Ebene unter Verwendung von Deny- und Allow-Regeln, die gegen den :path-Pseudo-Header abgeglichen werden...

POC_CVE-2026-42880

CVE-2026-42880 — Esposizione di Secret in ArgoCD tramite ServerSideDiff Un ambiente di laboratorio per riprodurre e rilevare CVE-2026-42880 , una vulnerabilità critica in Argo CD in cui l'handler gRPC ServerSideDiff espone i dati dei Secret Kubernetes a utenti con soli permessi di sola lettura...

ManticoreUI

============ Manticore UI .. image:: https://raw.githubusercontent.com/trailofbits/manticore/master/docs/images/manticore.png :width: 200px :align: center :alt: Manticore Das Manticore User Interface MUI-Projekt bietet ein Plugin mit grafischer Benutzeroberfläche für verschiedene Disassembler, mi...

CVE-2026-37236

grpc-gateway v2.28.0 contains an Incorrect Access Control flaw in its ServeMux.ServeHTTP handler. The component processes the X-HTTP-Method-Override header without restricting which HTTP methods are permitted. When a POST request with Content-Type: application/x-www-form-urlencoded carries this h...

merlin

Merlin Merlin ist ein plattformübergreifender Command-&-Control-Server und -Agent für die Post-Exploitation, geschrieben in Go. Hervorgehobene Funktionen: merlin-cli Kommandozeilen-Schnittstelle über gRPC zur Verbindung mit dem Merlin-Server, was Multi-User-Unterstützung ermöglicht Unterstützte...

CVE-2026-80209

The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSIONDENIED when createIsWorkspaceMember reports that the caller is not a member of the target workspace, but it does not return. Execution continues...

CVE-2026-80209 Fonoster through 0.22.7 Incorrect Authorization in the Identity UpdateWorkspace Handler

The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSIONDENIED when createIsWorkspaceMember reports that the caller is not a member of the target workspace, but it does not return. Execution continues...

EUVD-2026-67143

The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSIONDENIED when createIsWorkspaceMember reports that the caller is not a member of the target workspace, but it does not return. Execution continues...

CVE-2026-80209

Fonoster through version 0.22.7 contains an incorrect authorization flaw in the updateWorkspace handler (mods/identity/src/workspaces/createUpdateWorkspace.ts). The handler fires a gRPC PERMISSION_DENIED callback when the caller is not a workspace member but fails to return , allowing execution t...

CVE-2026-80209 Fonoster through 0.22.7 Incorrect Authorization in the Identity UpdateWorkspace Handler

The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSIONDENIED when createIsWorkspaceMember reports that the caller is not a member of the target workspace, but it does not return. Execution continues...

CVE-2026-5724

Riepilogo Il servizio frontend di Temporal non applica l'autenticazione sulle RPC gRPC in streaming. La catena di interceptor per lo streaming omette l'interceptor di autorizzazione, consentendo a chiamanti non autenticati di accedere a AdminService/StreamWorkflowReplicationMessages, un endpoint...

CQPToolkit

CQP Tool kit Il sistema fornisce vari componenti per integrare QKD in un sistema di sicurezza. È scritto in C++11 ma utilizza interfacce GRPC che permettono l'integrazione con molti linguaggi diversi. Avvio Rapido Per eseguire il software in modo nativo, è possibile: scaricare e installare i...

sandbox

Concave AI Sandbox AI कोड को सुरक्षित, तेज़ और अविश्वसनीय रूप से चलाएँ Firecracker माइक्रोवीएम पर आधारित एक स्व-होस्ट करने योग्य कोड निष्पादन सैंडबॉक्स प्लेटफ़ॉर्म। स्नैपशॉट-आधारित वार्म पूलिंग के साथ 200 मिलीसेकंड से कम की स्टार्टअप समय। परिचय Concave अविश्वसनीय कोड चलाने के लिए सुरक्षित और पृथक...

sliver-gui

Sliver GUI Una console operatore desktop per il framework Sliver C2, nello spirito di Cobalt Strike e Havoc. Progettata e sviluppata da Raj Kumar Mullapudi Sliver GUI è un frontend sottile basato su Wails v2 Go + HTML/CSS/JS puro che si appoggia al servizio gRPC rpcpb.SliverRPC già esistente di...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

gtunnel

Documentation can be found at: https://hotnops.gitbook.io/gtunnel/...

holo

Holo è una suite di protocolli di routing progettata per supportare reti ad alta scala e guidate dall'automazione. Per una descrizione di cosa sia un protocollo di routing, si prega di fare riferimento a questa pagina Wikipedia. Caratteristiche Focus su semplicità e correttezza L'obiettivo...

resterm

Resterm A terminal-native API client and workbench for REST, GraphQL, gRPC, WebSocket and SSE. Resterm is an API-as-code workbench - or, in more familiar terms, an API client - built around plain .http and .rest files that you can diff, review and version. It combines interactive request editing...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Authorization Bypass.

Summary google.golang.org/grpc is used by IBM Storage Fusion Data Foundation, which could allow Authorization Bypass. CVE-2026-33186. Vulnerability Details CVEID:CVE-2026-33186 DESCRIPTION: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass...