CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale 認証バイパス & RCE CVE-2024-3408 の再現可能なラボ環境です。D-Tale における認証バイパスおよびリモートコード実行の脆弱性です。 脆弱性 D-Tale バージョン 3.15.1 以前は、以下の理由により脆弱です： 1. ハードコードされた SECRETKEY "Dtale" による Flask セッション署名 - セッションクッキーの偽造が可能 2. カスタムフィルターによるコード実行 - test-filter エンドポイントは pandas クエリを使用しており、任意の Python...

cve-2026-49352-poc

CVE-2026-49352 — 9router ハードコードされたJWTシークレットによる認証バイパス 目次 概要 影響を受けるバージョン 根本原因 分析 リポジトリ構造 要件 使用方法 期待される出力 参考文献 免責事項 概要 CVE-2026-49352 は、AI コーディングツール向けのセルフホスト型 Node.js/Next.js プロキシである 9router の脆弱性です。ダッシュボードセッション JWT は JWTSECRET...

Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass

Kimai Docker images = 2.58.0 which generates a random APPSECRET on first boot. Alternatively, manually set a unique APPSECRET in your .env.local file. reference: - https://github.com/advisories/GHSA-jr9p-4h4j-6c58 - https://github.com/kimai/kimai/releases/tag/2.58.0 classification: cve-id:...

D-Tale 3.10.0 - 3.15.1 - Authentication Bypass & Remote Code Execution

man-group/dtale 3.10.0 contains an authentication bypass and remote code execution caused by improper input validation and a hardcoded SECRETKEY in Flask configuration, letting attackers forge session cookies and execute arbitrary code, exploit requires attacker to access the application. id:...

CVE-2026-21994

CVE-2026-21994 摘要 Oracle OKIT（oci-designer-toolkit）版本 0.3.0 包含两个严重的错误配置，可串联导致未经身份验证的完全接管。公开仓库中暴露的硬编码 Flask SECRETKEY 允许任何攻击者伪造有效的管理员会话 Cookie——无需任何凭据。此外，Docker 镜像完全禁用了 SSH 主机验证，使网络攻击者能够在基础设施部署期间拦截 OCI API 密钥和私钥。 漏洞 1. 硬编码SECRETKEY — okitclassic/okitserver/config.py:4 SECRETKEY='8980ffsd675747jjjh...

CVE-2021-40903

エクスプロイトタイトル: Antminer Monitor 0.5.0 - 認証バイパス CVE: CVE-2021-40903 日付: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 エクスプロイト作者: CQR.company / Vulnz. ベンダーホームページ: https://github.com/anselal/antminer-monitor, https://twitter.com/intent/follow?screenname=AntminerMonito...

Kimai-CVE-2026-49865-POC

Kimai CVE-2026-52824 — Default APPSECRET Authentication Bypass Note: The repository URL contains an outdated CVE ID CVE-2026-49865. The correct and current CVE tracked in this repository is CVE-2026-52824 GHSA-jr9p-4h4j-6c58. Proof-of-concept exploit toolkit for the hardcoded default APPSECRET...

CVE-2026-52824

Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...

CVE-2026-57148 praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonaiplatform/services/authservice.py falls back to the public dev-secret-change-me HS256 signing key when PLATFORMJWTSECRET is unset, while the startup and token-issuance guards are disabled because PLATFORMENV also defaults to dev. An...

EUVD-2026-76742

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment that copies this example file into active configuration without running the setup routine that regenerates the value...

CVE-2026-90451 Use of Default Credentials in Malcolm

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment that copies this example file into active configuration without running the setup routine that regenerates the value...

CVE-2026-90451

CVE-2026-90451, assigned by CISA ICS-CERT , describes a vulnerability in a bundled packet-analysis component where a fixed, publicly-known secret value is shipped in an example environment-configuration file. This secret is used to sign authentication cookies for that component. Deployments that ...

CVE-2026-90451 Use of Default Credentials in Malcolm

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis component. A deployment that copies this example file into active configuration without running the setup routine that regenerates the value...

PT-2026-90520

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An example environment-configuration file contains a fixed, publicly-known secret value used to sign authentication cookies for a bundled packet-analysis...

EUVD-2026-75162

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

CVE-2026-71801

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

PT-2026-89150

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

CVE-2026-85391 Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml

Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the published secret to mint valid tokens for arbitrary user IDs and access protected endpoints without credentia...

CVE-2026-85391 Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml

Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the published secret to mint valid tokens for arbitrary user IDs and access protected endpoints without credentia...

PT-2026-85224

Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the published secret to mint valid tokens for arbitrary user IDs and access protected endpoints without credentia...