CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE For educational and authorized security research purposes only. Description Pre-authenticated Remote Code Execution in Marimo = 0.20.4. The WebSocket endpoint /terminal/ws skips authentication validation, allowing an unauthenticated attacker to obtain a full...

CVE-2026-26418

CVE-2026-26418 Missing Authentication and Authorization in Web API Vulnerability Summary A missing authentication and authorization vulnerability was identified in the Web API layer of Tata Consultancy Services TCS – Cognix Recon Client v3.0. Certain exposed API endpoints did not enforce proper...

CVE-2025-8723

⚡️ Cloudflare Image Resizing Description: The plugin's REST API endpoint fails to authenticate users and improperly sanitizes input in the hookrestpredispatch method. This flaw enables attackers to inject and execute arbitrary PHP code by crafting malicious requests — with no login required. 🛠...

360WFP_Exploit

360WFPExploit A proof-of-concept PoC demonstrating potential abuse of the 360 Security WFP driver 360netmonx64wfp.sys interface, aimed at verifying the risk that IOCTL interfaces without caller authentication may be misused by third-party programs. This project is intended for security research a...

SAP_EEM_CVE-2020-6207

PoC for CVE-2020-6207 Missing Authentication Check in SAP Solution Manager This script allows to check and exploit missing authentication checks in SAP EEM servlet tcsmdagentapplicationeem that lead to RCE on SAP SMDAgents connected to SAP Solution Manager Original finding: Pablo Artuso Yvan 'igg...

changedetection.io

Detect Website Changes Automatically — Monitor Web Page Changes in Real Time Monitor websites for updates — get notified via Discord, Email, Slack, Telegram, Webhook and many more. Detect web page content changes and get instant alerts. Ideal for monitoring price changes, content edits, condition...

CVE-2026-47858

CVE-2026-47858 — Spring Tools "live information" mode unauthenticated JMX RCE PoC 中文 README | Advisory: Spring Security | CVE Record Vulnerability : Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 start Spring Boot applications in live information mode enabled by default with JVM...

CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE CVSS 10.0 CVSS 10.0 Critical · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck Summary Minds Platform the open-source backend of mindsdb/mindshub, previously mindsdb/minds-platform exposes POST /api/v1/responses/ an OpenAI-compatible...

CVE-2026-100903

CVE-2026-100903 GEOritm Missing Authentication Description : A vulnerability in the POST /restapi/objects/obj-groups method of the GEO.RITM software REST API is related to a lack of authentication before executing the function. Impact : Exploitation of this vulnerability could allow an attacker...

CVE-2024-41713POC

CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform Arbitrary File Read Vulnerability CVE-2024-41713 Due to an authentication bypass vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab software, and insufficient input validation, an unauthenticated remote...

CVE-2026-25938-FUXA-Unauthenticated-RCE

CVE-2026-25938 - FUXA Unauthenticated RCE 1. What is FUXA? FUXA is a free, open-source, web-based SCADA Supervisory Control and Data Acquisition and HMI Human-Machine Interface platform used for industrial automation , IoT , and real-time process visualization. It lets users build custom...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE /terminal/ws CVSS 4.0 : 9.3 CRITICAL CVSS 3.x : 9.8 CRITICAL CWE : CWE-306 Missing Authentication for Critical Function Fix : Marimo 0.23.0+ Affects : Marimo Lab / authorized testing only HTB, CTF, engagement with written scope. Table of contents Vulnerability...

cip-security-poc

cip-security-poc — proving the fix principle behind CVE-2021-22681 not just its flaw Six runnable scripts — real EtherNet/IP protocol traffic Test 1, real TLS/PKI mechanics Tests 3–6 — zero Rockwell software or licensing anywhere in the chain. Built to test a claim before writing it up, not to...

CVE-2026-39987

CVE-2026-39987 - marimo Terminal WebSocket Authentication Bypass poc Overview This repository contains CVE-2026-39987 affecting marimo versions before 0.23.0. The vulnerability exists in the terminal WebSocket endpoint, where insufficient authentication enforcement may allow an unauthenticated...

argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access

argocd-mcp before 0.9.0 binds its MCP HTTP listener to all interfaces without requiring authentication. A remote unauthenticated attacker can initialize an MCP session, complete the handshake, and enumerate or invoke the full Argo CD tool surface using the operator's stored API token. id:...

Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure

Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system/dialogs/file/usage/fID accepts an integer file ID in the URL and returns internal site structure data page IDs, versions, URL paths to anyone who sends a GET request. id:...

CyberPower - Missing Authentication

An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. id: CVE-2024-32735 info: name: CyberPower - Missing Authentication author: DhiyaneshDK severity: critical description: | An issue regarding missing authentication for certai...

Flowise <= 3.0.13 - Unauthenticated OAuth Configuration Disclosure

Flowise before 3.1.0 contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint, allowing unauthenticated remote attackers to retrieve an organization's complete SSO configuration including OAuth client secrets by providing an organizationId parameter. id: CVE-2026-56270...

NeuVector - Information Disclosure

NeuVector through 5.4.9 contains an information disclosure vulnerability caused by missing authentication and cached sensitive data in the manager /network/graph API, letting remote attackers access sensitive information, exploit requires no special privileges. id: CVE-2026-25703 info: name:...

Discourse - Unauthenticated Mailpace Webhook Bounce-Score Forgery

Discourse's WebhooksController contains a missing-authentication flaw caused by accepting requests to provider webhook endpoints including /webhooks/mailpace, SendGrid, Mailjet, Mandrill, Postmark, and SparkPost without validating a token when none is configured, which is the default state, letti...