Copyparty <=1.18.6 - Cross-Site Scripting

Copyparty before 1.18.7 is vulnerable to reflected cross-site scripting XSS via the 'filter' parameter in the '/?ru' endpoint. Unsanitized user input is reflected in the HTML response, allowing attackers to execute arbitrary JavaScript in the context of the victim's browser. id: CVE-2025-54589...

CVE-2026-46453

camel-elasticsearch-rest-client Репродуктор инъекции через заголовки без префикса CVE-2026-46453 Этот проект демонстрирует инъекцию заголовков сообщений / обход авторизации в компоненте camel-elasticsearch-rest-client Apache Camel, отслеживаемую как CVE-2026-46453. Компонент читает несколько...

CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV 원격 명령 삽입 CVE-2019-3929 Metasploit 모듈 Tenable의 설명에 따르면: 인증되지 않은 원격 공격자는 HTTP 엔드포인트 filetransfer.cgi에 조작된 요청을 전송하여 루트 권한으로 운영 체제 명령을 실행할 수 있습니다. 이 취약점은 알려진 모든 장치에 영향을 미치는 것으로 보입니다. 여기에는 Crestron AM-100 펌웨어 1.6.0.2, Crestron AM-101 펌웨어 2.7.0.1, Barco...

CVE-2026-105245

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105245

The sgl-project sglang library (up to version 0.5.21 ) contains a vulnerability in the HTTP Endpoint component, specifically within the server_info function of the python/sglang/srt/entrypoints/http_server.py file. Manipulation of the api_key argument can result in the cleartext transmission of s...

CVE-2026-105245 sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

EUVD-2026-92264

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105245 sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105245 sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2026-105245: Cleartext Transmission of Sensitive Information

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function serverinfo of the file python/sglang/srt/entrypoints/httpserver.py of the component HTTP Endpoint. Such manipulation of the argument apikey leads to cleartext transmission of sensitive information. ...

CVE-2021-3019

CVE-2021-3019 Добавьте IP-адреса в файл ip.txt, обратите внимание на формат: http://127.0.0.1 Каждый IP на отдельной строке. Откройте Cheeetah и запустите...

CVE-2021-37832

CVE-2021-37832 CVE 2021-37832 poc использование : python3 CVE-2021-37832.py http://test.com...

CVE-2023-23752

Установка git clone https://github.com/0xx01/CVE-2023-23752.git cd CVE-2023-23752 chmod +x exploit.sh Использование ./exploit.sh http://localhost...

CVE-2021-26084

использование: python poc.py http://host:port/...

SECURITY-3314-3315

= Смягчение уязвимостей SECURITY-3314/SECURITY-3315 Данный репозиторий содержит инструкции по смягчению последствий эксплуатации уязвимостей SECURITY-3314 и SECURITY-3315 на затронутых экземплярах. == Обзор Необходимо отключить доступ к CLI. Необходимо выполнить оба следующих шага: Удалить HTTP...

CVE-2026-23744

CVE-2026-23744 – 개념 증명PoC 이 PoC의 Python 스크립트는 MCPJam inspector버전 리스닝 포트로 교체 그런 다음 다른 셸을 열고 PoC를 실행하세요: cd CVE-2026-23744 python3 exploit.py 참고 자료 HTTP 엔드포인트 노출로 인한 MCPJam inspector의 RCE GHSA-232v-j27c-5pp6 MCPJam/inspector@e6b9cf9 https://nvd.nist.gov/vuln/detail/CVE-2026-23744 면책 조항 이 프로젝트는 교육 및...

CVE-2025-24893

CVE-2025-24893 Использование python CVE-2025-24893 http://target.com...

CVE-2024-1561

CVE-2024-1561 - Gradio 임의 파일 읽기 CVE-2024-1561 은 4.13.0 이전 Gradio 버전에 영향을 주는 임의 파일 읽기 취약점입니다. Gradio는 머신러닝 모델과 AI 애플리케이션용 웹 인터페이스를 빠르게 구축하는 데 사용되는 널리 알려진 Python 프레임워크입니다. 이 취약점은 /componentserver 엔드포인트가 내부 Component 클래스의 어떤 메서드를 호출할 수 있는지 제대로 제한하지 않기 때문에 발생합니다. 공격자는 이 동작을 악용하여 HTTP로 노출될 의도가 없는 메서드를...

EUVD-2026-86320

DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to 0.22.5 expose an unauthenticated HTTP MCP endpoint when started with the documented HTTP transport mode, for example --transport http --port 8080. The HTTP server attempts to protect...

GHSA-3R68-HF9H-887V MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

Summary ENABLEDTOOLS and TOOLSETS filters are enforced at tools/list time only. tools/call dispatches from the full unfiltered tool registry 73 tools. Any user with access to the server endpoint that knows a tool name can invoke it directly. Tool names are not secret since mcp-atlassian is open...