CVE-2026-77320

The collaborative travel planner TREK is vulnerable to an information disclosure flaw in versions prior to 3.3.0 . The getSharedTripData function in server/src/services/shareService.ts fails to respect the share_map permission on the server-side. Consequently, while the client UI may hide the map...

CVE-2026-77321

The collaborative travel planner TREK is vulnerable prior to version 3.3.0 due to a missing scope check in the get_trip_summary tool located in server/src/mcp/tools/trips.ts. The application fails to require the trips:read scope for scoped OAuth MCP tokens. Consequently, an attacker with a token ...

CVE-2026-77321 TREK MCP trip summary bypasses delegated OAuth read scopes

TREK is a collaborative travel planner. Prior to 3.3.0, the gettripsummary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring trips:read and returns core trip summary data regardless of the delegated scopes. A token granted only an unrelated...

CVE-2023-28432

CVE-2023-28432 Minio es un servicio de almacenamiento de objetos basado en el lenguaje Go. Implementa la mayoría de las interfaces del servicio de almacenamiento en la nube Amazon S3, y puede considerarse como la versión de código abierto de S3, muy adecuado para almacenar grandes volúmenes de...

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data CVE‑2026‑20805: Una falla del Administrador de Ventanas de Escritorio DWM de Windows que provoca divulgación de información local. Requiere privilegios bajos, sin interacción del usuario. Clasificada con CVSS 5.5 Media. Explotada...

CVE-2025-62168

CVE-2025-62168 Divulgación de Información de Squid Proxy en el manejo de errores Escáner Detección y PoC "Debido a una falla al redactar las credenciales de Autenticación HTTP, Squid es vulnerable a un ataque de Divulgación de Información. Gravedad: Este problema permite que un script omita las...

Llama-Stack-0.4.0rc3-local-CVE-2026-25211

PoC de Fuga de Contraseña de pgvector en Llama Stack CVE-2026-25211 Prueba de Concepto Local que demuestra la exposición de contraseñas de base de datos en texto plano en los registros de inicialización de llama-stack versiones 0.4.0rc3. Descripción general En las versiones afectadas de llama-sta...

PoC-CVE-2026-21858

PoC-CVE-2026-21858 n8n es una plataforma de automatización de flujos de trabajo de código abierto. Las versiones desde la 1.65.0 hasta la 1.121.0 permiten a un atacante acceder a archivos en el servidor subyacente mediante la ejecución de ciertos flujos de trabajo basados en formularios. Un flujo...

log4shell

Log4Shell Este proyecto es una demostración del funcionamiento de la vulnerabilidad de seguridad log4shell. Esta vulnerabilidad está descrita en la CVE-2021-44228. El proyecto está destinado únicamente a fines educativos. Solo debe utilizarse en su propio sistema y únicamente con fines...

CVE-2018-15473

CVE-2018-15473 - SSH 用户名枚举漏洞利用工具 用于在存在漏洞的 SSH 服务器（OpenSSH 2.3 至 7.7）上枚举有效用户名的工具。 📋 漏洞描述 CVE-2018-15473 允许通过在 SSH 服务器上发送畸形的认证数据包来枚举现有用户。服务器对畸形数据包的响应会因用户是否存在而不同： 如果用户不存在 → 服务器立即返回 SSH2MSGUSERAUTHFAILURE 如果用户存在 → 服务器尝试解析数据包，遇到错误后直接关闭连接，不返回任何响应 本工具通过发送精心构造的数据包并解析服务器的响应来判断哪些用户名是有效的。 ⚙️ 环境要求 Python 3.6...

CVE-2026-63645 OpenObserve: Unauthenticated /config/runtime endpoint exposes PostgreSQL database credentials

OpenObserve is a cloud-native observability platform. Prior to 0.90.3, OpenObserve registers the /config/runtime endpoint without authentication and serializes the complete server configuration after applying the hidesensitivefields keyword filter. The filter does not recognize dsn or creds field...

EUVD-2026-86323

Rsdoctor is a build analyzer tailored for projects built with Rspack. Prior to version 1.5.16, the default Rsdoctor report HTTP server started by @rsdoctor/rspack-plugin binds to all network interfaces 0.0.0.0 and serves a POST /api/data/key endpoint with no authentication and wildcard CORS...

CVE-2026-97496

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

DEBIAN-CVE-2026-97476

In the Linux kernel, the following vulnerability has been resolved: rds: filter RDSINFO getsockopt by caller's netns The RDSINFO family of getsockopt2 options reads several file-scope global lists that are not per-netns: rdssockinfo / rds6sockinfo, rdssockincinfo / rds6sockincinfo - rdssocklist...

CVE-2026-97476

In the Linux kernel, the following vulnerability has been resolved: rds: filter RDSINFO getsockopt by caller's netns The RDSINFO family of getsockopt2 options reads several file-scope global lists that are not per-netns: rdssockinfo / rds6sockinfo, rdssockincinfo / rds6sockincinfo - rdssocklist...

CVE-2026-97422

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

DEBIAN-CVE-2026-97422

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

CVE-2026-97419

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

DEBIAN-CVE-2026-97419

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

CVE-2026-94611

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...