MicroserviceCVE-2021-39156

This repository does not have a README...

Mirage

Mirage OSINT Platform Mirage is an open-source intelligence OSINT platform built as a microservice architecture. It provides a scalable and extensible framework for collecting, analyzing, and visualizing intelligence data from various sources. Architecture Mirage is built using a microservice...

CVE-2026-82044

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf method exposed via GET /api/generate-pdf-report. Attacke...

CVE-2026-82044 UTMStack < 11.2.16 Server-Side Request Forgery via downloadPdf

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf method exposed via GET /api/generate-pdf-report. Attacke...

CVE-2026-82044 UTMStack < 11.2.16 Server-Side Request Forgery via downloadPdf

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf method exposed via GET /api/generate-pdf-report. Attacke...

CVE-2026-102281 Nest: Remote process termination via a deeply nested microservice message pattern

Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply nested object in its pattern can terminate a NestJS microservice using the TCP or RabbitMQ transport. ServerTCPhandleMessage and ServerRMQhandleMessage pass a...

CVE-2026-102281: Uncaught Exception

Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply nested object in its pattern can terminate a NestJS microservice using the TCP or RabbitMQ transport. ServerTCPhandleMessage and ServerRMQhandleMessage pass a...

Confidence-Guided Cross-Modal Knowledge Transfer for Multimodal Anomaly Detection in Microservice Systems

Accurate anomaly detection is essential for reliable and secure operations of microservice systems. While an increasing number of studies have shifted from unimodal modeling to multimodal interaction and fusion, effectively leveraging reliable cross-modal information remains challenging. The...

CLSA-2026-1776991063 TuxCare security update for ms (1 CVE)

TuxCare rebuilt ms to address 1 CVE. Fixed in 2.0.0-tuxcare.1...

Moleculer Microservices Project Detection

Moleculer microservice was able to be accessed with no required authentication in place. !/usr/bin/env python3 -- coding: utf-8 -- """Moleculer microservice was able to be accessed with no required authentication in place.""" from kittysploit import from lib.protocols.http.httpclient import...

@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +419 more potentially affected by CVE-2026-73562 via mongoose (>=6.0.1, <=6.13.9)

mongoose NPM version =6.0.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =1.0.5, =3.9.0, =1.0.9, =1.0.0-beta1, =1.4.5, =1.1.80, =0.0.1, =0.1.16 and more Source cves: CVE-2026-73562 Source advisory: OSV:GHSA-664H-WQGQ-64GW...

CVE-2026-61459 MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structured tools kubectlget, kubectldescribe, kubectldelete that allows attackers to bypass the assertNoDangerousFlags security check by supplying resourceType and name parameters with leading dashes. Attackers can...

django-microservice-common (>=0.1.0, <=0.1.7), djangodjangodjango (4.0.7) +3 more potentially affected by CVE-2026-53878 via django (4.0.7)

django PYPI version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-microservice-common =0.1.0, =11.4.0, =0.1.0, =0.1.3 - tesla-ce 1.0.0 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

django-microservice-common (>=0.1.0, <=0.1.7), djangodjangodjango (4.0.7) +3 more potentially affected by CVE-2026-53877 via django (4.0.7)

django PYPI version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-microservice-common =0.1.0, =11.4.0, =0.1.0, =0.1.3 - tesla-ce 1.0.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

django-microservice-common (>=0.1.0, <=0.1.7), djangodjangodjango (4.0.7) +3 more potentially affected by CVE-2026-48588 via django (4.0.7)

django PYPI version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-microservice-common =0.1.0, =11.4.0, =0.1.0, =0.1.3 - tesla-ce 1.0.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

CVE-2026-58446 Presenton < 0.8.8-beta - Authentication Bypass of Session Auth via Unprotected MCP Endpoint

Presenton before 0.8.8-beta bundles an MCP server that, on server/Docker deployments configured with session authentication AUTHUSERNAME/AUTHPASSWORD, is reachable unauthenticated at /mcp because the nginx front-end does not apply the authrequest gate to that path and the MCP server auto-mints a...

CVE-2026-12773 BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +159 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.3.1.release)

org.springframework:spring-webmvc MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =1.1.4-release, =1.1.4-release,...

django-microservice-common (>=0.1.0, <=0.1.7), djangodjangodjango (4.0.7) +3 more potentially affected by CVE-2026-6873 via django (4.0.7)

django PYPI version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-microservice-common =0.1.0, =11.4.0, =0.1.0, =0.1.3 - tesla-ce 1.0.0 Source cves: CVE-2026-6873 Source advisory: OSV:GHSA-H7PC-VWP9-298G...

API Security Based on Automatic OpenAPI Mapping

This paper presents Map Reduce Graph MRG, a novel unsupervised method for modeling and securing HTTP REST APIs. MRG learns API structure from real-world traffic without prior knowledge or labels, automatically generating OpenAPI-compliant documentation by reconstructing routes, methods, and...