Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. SYSTEM ANALYSIS Identifying the Attack Surface from the Docker Environment Starting with what is running in the environment. We list all active containers: docker ps Result: Container p1/lab10:latest is running, exposing 2 ports externally: Port mapping| Protocol ---|---...

CypherDog

CypherDog4.3 PoSh BloodHound Dog Whisperer aka PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API Compatible with Bloodhound 4.3+ and neo4j 4.4+...

CVE-2019-20933

LAB 5-CVE-2019-20933 I. SYSTEM ANALYSIS Identifying the Attack Surface Starting with what is running in the environment. I list all active containers: docker ps The victim exposes a single port:8086. Currently, I do not have detailed information about the target. From the docker ps output, the...

OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection

OpenTSDB contains a command injection caused by insufficient validation of parameters passed to the legacy HTTP query API, letting attackers inject crafted OS commands and execute malicious code, exploit requires sending crafted parameters. id: CVE-2023-25826 info: name: OpenTSDB = 2.4.1 -...

CVE-2026-95149

CVE-2026-95149 — Authenticated RCE via eval Injection in episodeoffset MoviePilot FormatParser Field| Value ---|--- CVE ID| CVE-2026-95149 Product| MoviePilot jxxghp/MoviePilot Affected versions| = v3.0.0 Fixed in| v3 branch — commit 65b9c777de9194e40ba29dc17345afc5b4b4b0ba Severity| High Attack...

burp-cc-bridge

CC-Bridge A Burp Suite Montoya API extension that exposes Burp's most useful primitives over a localhost HTTP API so an agentic coding shell Claude Code, OpenAI Codex, etc. can drive Burp from curl. Works on Burp Community. Download Grab the latest release JAR — no clone or build required:...

CVE-2026-123270

Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution RCE. In streams mode, the management HTTP API is exposed on 0.0.0.0:4195, but authentication is disabled by default and there is no authentication gate...

CVE-2026-123270

Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution RCE. In streams mode, the management HTTP API is exposed on "0.0.0.0:4195", but authentication is disabled by default and there is no authentication gate...

CVE-2026-123270

Redpanda Connect (formerly Benthos) versions 4.39 to 4.110 are vulnerable to unauthenticated remote code execution (RCE) due to a missing authentication gate on the management HTTP API exposed on 0.0.0.0:4195 in streams mode. An unauthenticated attacker with network access can POST a malicious pi...

CVE-2026-123270 CVE-2026-123270

Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution RCE. In streams mode, the management HTTP API is exposed on 0.0.0.0:4195, but authentication is disabled by default and there is no authentication gate...

CVE-2026-123270 CVE-2026-123270

Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution RCE. In streams mode, the management HTTP API is exposed on 0.0.0.0:4195, but authentication is disabled by default and there is no authentication gate...

EUVD-2026-120155

Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution RCE. In streams mode, the management HTTP API is exposed on 0.0.0.0:4195, but authentication is disabled by default and there is no authentication gate...

CVE-2026-124573

A vulnerability was found in logseq 2.0.1/2.0.2. This affects the function validate-auth-token of the file src/electron/electron/server.cljs of the component Local HTTP API. The manipulation results in missing authentication. The attack may be performed from remote. The exploit has been made publ...

CVE-2026-124573 logseq Local HTTP API server.cljs validate-auth-token missing authentication

A vulnerability was found in logseq 2.0.1/2.0.2. This affects the function validate-auth-token of the file src/electron/electron/server.cljs of the component Local HTTP API. The manipulation results in missing authentication. The attack may be performed from remote. The exploit has been made publ...

EUVD-2026-119838

A vulnerability was found in logseq 2.0.1/2.0.2. This affects the function validate-auth-token of the file src/electron/electron/server.cljs of the component Local HTTP API. The manipulation results in missing authentication. The attack may be performed from remote. The exploit has been made publ...

CVE-2026-124573 logseq Local HTTP API server.cljs validate-auth-token missing authentication

A vulnerability was found in logseq 2.0.1/2.0.2. This affects the function validate-auth-token of the file src/electron/electron/server.cljs of the component Local HTTP API. The manipulation results in missing authentication. The attack may be performed from remote. The exploit has been made publ...

CVE-2026-124573

The software logseq versions 2.0.1 and 2.0.2 contains a vulnerability in the Local HTTP API component. Specifically, the validate-auth-token function located in src/electron/electron/server.cljs fails to properly enforce authentication, leading to a missing authentication flaw (CWE-306 , CWE-287 ...

PT-2026-140928

Name of the Vulnerable Software and Affected Versions Redpanda Connect versions 4.39 through 4.110 Description In streams mode, the management HTTP API is exposed on 0.0.0.0:4195 without authentication enabled by default, leaving stream CRUD routes unprotected. An unauthenticated attacker with...