CVE-2024-37843-POC

CVE-2024-37843-POC POC für CVE-2024-37843. Craft CMS zeitbasierte blinde SQLi Details verfügbar im Blog POC root@kitploit: curl -X POST '/api/' -H 'Content-Type:application/json' -d '"query":"query IntrospectionQuery assetsorderBy: "assets.volumeId -- \ \n \n LIMIT 5 AS subquery\nINNER JOIN...

CVE-2021-4191_Exploits

CVE-2021-4191Explorações pip install python-graphql-client Uso: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Direitos autorais: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

CVE-2025-56643

CVE-2025-56643 Referência pública para CVE-2025-56643 – Vulnerabilidade de Sessão JWT do Wiki.js 2.5.307 Descrição: O Requarks Wiki.js 2.5.307 não revoga ou invalida corretamente tokens JWT ativos quando um utilizador termina a sessão. Como resultado, tokens emitidos anteriormente permanecem...

cli

CloudGraph è lo strumento open-source universale API GraphQL e Cloud Security Posture Management CSPM per AWS, Azure, GCP e K8s. Con CloudGraph ottieni: Controlli di conformità gratuiti e senza sforzo ad es. Azure CIS 1.3.1, GCP CIS 1.2, AWS CIS 1.2, AWS CIS 1.3, AWS CIS 1.4, AWS PCI 3.2.1, AWS...

CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Template Nuclei Template di rilevamento non distruttivo Nuclei per CVE-2026-19478 , una vulnerabilità critica CVSS 9.4 di invocazione arbitraria di metodi non autenticata nell'API GraphQL di GitLab, corretta da GitLab il 17 agosto 2026. In breve Lo schem...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

CVE-2021-4191-EXPLOIT

CVE-2021-4191 - Enumerazione degli utenti di GitLab GitLab è uno strumento DevOps basato sul web ampiamente utilizzato che offre un gestore di repository Git con funzionalità integrate per l'integrazione continua, il tracciamento dei problemi, le revisioni del codice e altro ancora. L'API GraphQL...

GraphQLer

L'unico strumento di test per API GraphQL con consapevolezza delle dipendenze! GraphQLer è uno strumento all'avanguardia progettato per testare dinamicamente le API GraphQL con un focus sull'adattabilità. Offre una gamma di funzionalità sofisticate che semplificano il processo di test e...

CVE-2026-55489

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

EUVD-2026-63683

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

CVE-2026-55489 BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

CVE-2026-55489 BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

PT-2026-79191

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 3.0.29 Description Presenters can submit a presentationId through the '/api/graphql' endpoint that identifies a presentation belonging to a different meeting. The RemovePresentationPubMsgHdlr.scala function fail...

CVE-2026-48744 Saleor: Anonymous users can modify channel settings via `channelUpdate` due to `all([])` bypass in permission check

Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization check in saleor/permission/utils.py can incorrectly authorize unauthenticated GraphQL requests. The flaw permits anonymous callers to use the channelUpdate mutation to change channel order...

CVE-2026-16046

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to enforce run-state validation on write operations for finished playbook runs which allows a run participant to modify status, checklists, retrospective content, ownership, and participants on completed runs via REST and GraphQL API...

CVE-2026-16046 Missing run-state validation on finished playbook runs

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to enforce run-state validation on write operations for finished playbook runs which allows a run participant to modify status, checklists, retrospective content, ownership, and participants on completed runs via REST and GraphQL API...

CVE-2026-16046

Mattermost versions 11.7.x ≤ 11.7.6 and 10.11.x ≤ 10.11.21 lack run-state validation on write operations for completed playbook runs, enabling authenticated participants to alter status, checklists, retrospective content, ownership, and participants via REST and GraphQL APIs. No patch version or ...

EUVD-2026-60207

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to enforce run-state validation on write operations for finished playbook runs which allows a run participant to modify status, checklists, retrospective content, ownership, and participants on completed runs via REST and GraphQL API...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site Scripting issue in Analytics Dashboards table field configuration impacts GitLab CE/EE Cross-site Scripting issue in Analytics Dashboards pagination controls impacts GitLab CE/EE GitLab Improper Authorization issue in CI/CD pipeline API impacts GitLab CE/EE Authorizatio...

CVE-2026-8934

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...