41 matches found
gardyn-hack
Summary In February 2025 I conducted security research on a Gardyn Home 4.0 device. During my research, I discovered multiple vulnerabilities and poor security practices. By leveraging these vulnerabilities an attacker may be able to gain system level access to a Gardyn device and use it to stage...
MITMer
MITMer This tool can do the following: MITM attack on a specific host or all LAN hosts. Show HTTP and DNS activity of attacked hosts. Drop DNS queries asking about a website and redirects them to your PC. Convert that website into a fake page and host it on your PC. Dependencies: python2 scapy...
CVE-2026-114090 Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server
Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...
CVE-2026-114090
The Trigger.dev cli-v3 (versions 3.0.0 before 4.5.4 ) is vulnerable to a missing authentication flaw in the trigger dev --mcp server. The server binds to all network interfaces, exposing the /sse and /messages endpoints. This allows LAN attackers or malicious web pages to send MCP tools/call requ...
CVE-2026-114090 Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server
Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...
CVE-2026-114090 Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server
Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...
EUVD-2026-88234
mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...
CVE-2026-82936
The mH-DEVELOPER smart home module is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies, allowing an attacker on the LAN to send large request bodies that exh...
EUVD-2026-88230
mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication. An unauthenticated attacker on the LAN can query these endpoints, access system information, and send raw control commands to...
CVE-2026-82930 Missing Authentication in mH-DEVELOPER
mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication. An unauthenticated attacker on the LAN can query these endpoints, access system information, and send raw control commands to...
CVE-2026-44830
Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when APITOKEN is unset or empty, the BearerTokenAuthMiddleware bypasses authentication for all HTTP requests. Combined with the default 0.0.0.0 host binding and CORS alloworigins="",...
CVE-2026-36539: Exposure of Sensitive Information to an Unauthorized Actor
Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skkget.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi...
CVE-2026-7161: Reliance on Security Through Obscurity
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...
CVE-2026-42363: Reliance on Security Through Obscurity
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...
CVE-2026-32617: Permissive Cross-domain Policy with Untrusted Domains
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, On default installations where no password or API key has been configured, all HTTP endpoints and the agent WebSocket lack authentication, and the...
CVE-2026-0406
The CVE refers to CVE-2026-0406 affecting NETGEAR XR1000v2, where insufficient input validation allows attackers on the LAN to perform OS command injections. Affected component is the device firmware’s handling of inputs that leads to command execution; root cause is input validation weakness. Do...
CVE-2025-66177
CVE-2025-66177 describes a stack overflow vulnerability in Hikvision NVR/DVR/CVR/IPC devices’ Search and Discovery feature. An attacker on the same LAN could cause a device to malfunction by sending specially crafted packets to an unpatched device. Connected sources corroborate a Hikvision stack-...
CVE-2026-0403: Improper Input Validation
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections...
CVE-2026-0406: Improper Input Validation
An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections...