wssip

This repository does not have a README...

CVE-2026-33017

CVE-2025-62593 — Ray 未授权 RCE 漏洞利用工具 概述 CVE-2025-62593 是 Ray 分布式 AI 计算引擎中的一个未授权远程代码执行漏洞。根本原因在于关键 HTTP 端点（/api/jobs、/api/jobagent/jobs）缺少身份认证。攻击者可以提交一个入口点为任意命令的 Ray Job，并在集群头节点上执行该命令。 快速开始 单个目标 python3 rayrcepoc.py --target http://HOST:8265 批量扫描（10 个并发） python3 rayrcepoc.py --targets list.txt...

CVE-2026-20253

CVE-2026-20253 — Splunk Enterprise 预认证 RCE 实验室 通过 PostgreSQL Sidecar 进行未认证的任意文件创建与截断 CVSS 9.8 · 严重 · CWE-306 · 已被积极利用（CISA KEV） ⚠️ 免责声明 本仓库严格用于教育和经授权的安全研究目的 。 所有测试必须针对你拥有或已获得明确书面授权进行测试的基础设施执行。 作者对滥用此处演示的技术或工具不承担任何责任。 切勿针对生产系统或你不拥有的环境运行此内容。 概述 CVE-2026-20253 影响低于 10.2.4 和 10.0.7 的 Splunk Enterprise...

CVE-2026-54076 ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)

ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026-44221 added an UPDATESCHEMA authorization check only to LocalDocumentType.createProperty, while the remaining public schema mutators in engine/src/main/java/com/arcadedb/schema/LocalDocumentType.java and...

CVE-2026-54076: Missing Authorization

ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026-44221 added an UPDATESCHEMA authorization check only to LocalDocumentType.createProperty, while the remaining public schema mutators in engine/src/main/java/com/arcadedb/schema/LocalDocumentType.java and...

Exploit for Eval Injection in Langflow

CVE-2025-62593 — Ray Unauthenticated RCE Exploit Overview...

EUVD-2026-53327

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend exposes HTTP file-download endpoints GET /file, GET /files/, PUT /files/ that convert a client-supplied URI directly to a filesystem path and stream the file, without confining it to the workspace or any...

MAL-2026-12219 Malicious code in tailwind-animationgroup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7ac62a4a5dbe9acfdc813215213c698a79588f96614191505e41bf116c9c66 src/index.js appends an evalatob... blob after the tailwind plugin export. On any require/import of the package, the decoded loader queries Ethereum...

CVE-2026-67342 ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers

ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...

CVE-2026-14537: Incorrect Authorization

Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tools protected by the scopeRequired feature via sending tool invocation requests through legacy HTTP endpoints when the --enable-a...

CVE-2026-65894: Improper Restriction of Excessive Authentication Attempts

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...

Sensitive Information Disclosure

routesrv is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the lack of authentication on HTTP endpoints exposing routing and cache topology data, which allows an attacker with network access to retrieve sensitive cluster-wide configuration and infrastructure informati...

EUVD-2026-45295

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...

PT-2026-67322

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.7.2 Description An authorization bypass exists in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints. The issue occurs because approximately 14 HTTP handlers resolve the database path paramete...

CVE-2026-54798

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt th...

CVE-2026-54798: Active Debug Code

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt th...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to not performing permission checks in several HTTP endpoints that used to validate cloud configurations. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using...

Jenkins Contrast Continuous Application Security Plugin missing permission checks

Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier does not perform permission checks in several HTTP endpoints that fill list box options with the names of the configured Contrast metadata. This allows attackers with Overall/Read permission to enumerate the names of...

Jenkins Gitee Plugin missing permission checks

Jenkins Gitee Plugin 1288.v18bdebc9069b and earlier does not perform permission checks in several HTTP endpoints implementing form validation for its global configuration. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentia...

Jenkins EC2 Fleet Plugin has a missing permission check

Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a81c3 and earlier does not perform permission checks in several HTTP endpoints used to validate cloud configurations. This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs...