112931 matches found
CVE-2017-16995
This repository does not have a README...
CVE-2017-9830
This repository does not have a README...
CVE-2021-3156
This repository does not have a README...
CVE-2022-28943
This repository does not have a README...
CVE-2024-4956
This repository does not have a README...
exploit
Este repositorio no tiene un README...
cve-2023-32243
This repository does not have a README...
CVE-2019-0708
This repository does not have a README...
CVE-2023-31541
This repository does not have a README...
CVE-2023-37786
This repository does not have a README...
CVE-2026-108863
Katanemo Plano versions through 0.4.37 are vulnerable to a missing authentication flaw on the Envoy admin interface , which is bound to all host interfaces on port 9901 . Unauthenticated network attackers can access the /config_dump endpoint to retrieve LLM provider API keys in plaintext from the...
EUVD-2026-97014
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...
CVE-2026-108863 Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...
CVE-2026-108855
The UnicomAI Wanwu platform, version through 0.6.5 , is vulnerable to a missing authorization flaw (CWE-862) via the DELETE /v1/appspace/app/publish endpoint. This vulnerability allows any authenticated enabled user to revoke AppKeys for arbitrary apps by supplying a target appId and appType from...
EUVD-2026-97006
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary apps via the unpublish endpoint. Attackers can supply a target appId and appType from the exploration marketplace to delete other...
EUVD-2026-97002
phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...
CVE-2026-108851
The phpMyFAQ application (through version 4.1.10 ) is vulnerable to a missing authorization flaw in the MCP server faq_search tool . The root cause is that the Search::searchDatabase() function fails to apply necessary user or group permission checks. Consequently, an attacker connected to the ph...
EUVD-2026-96997
CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list permission-restricted resources because ResourceController listAction skips the isGrantedOr403 check. Authenticated Pimcore users lacking resource permissions can request the...
CVE-2026-108697
CoreShop versions through 2026.2.2 contain a missing authorization vulnerability (CWE-862) within the ResourceController listAction . The root cause is that the action skips the isGrantedOr403() check, allowing authenticated Pimcore users with low privileges to bypass permission restrictions. Exp...