108597 matches found
EUVD-2026-93402
Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to create, steal, and falsely complete replication tasks via the cororpc port. Attackers can invoke CreateCopyTask, CreateMoveTask, FetchTasks, and MarkTaskToComplete wi...
CVE-2026-106039 Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC
Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to create, steal, and falsely complete replication tasks via the cororpc port. Attackers can invoke CreateCopyTask, CreateMoveTask, FetchTasks, and MarkTaskToComplete wi...
EUVD-2026-93401
Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated attackers to force-delete any object via Remove, RemoveByRegex, RemoveAll and BatchRemove on the cororpc port. Attackers can send forged requests with the force flag set to bypas...
CVE-2026-106037 Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /api/removeall and /api/mount to read cached KV data with user...
CVE-2026-106037
Versions of Mooncake through 0.3.13.post1 are affected by a missing authentication vulnerability in the Store REST service . The service binds to 0.0.0.0 without requiring authentication on any route. This allows unauthenticated attackers to access specific endpoints, including /api/get , /api/pu...
EUVD-2026-93400
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /api/removeall and /api/mount to read cached KV data with user...
CVE-2017-7358
This repository does not have a README...
cve-2024-38063-Anonyvader
This repository does not have a README...
CVE-2026-82924
The Expert Mail software by Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. is affected by an Improper Control of Interaction Frequency vulnerability (CWE-799 ). This security flaw arises from a missing rate limiting mechanism, which allows for Brute Force attacks to perform PI...
CVE-2018-6574
This repository does not have a README...
CVE-2024-3690
This repository does not have a README...
CVE-2023-42793
This repository does not have a README...
CVE-2020-19587
This repository does not have a README...
writeups
This repository does not have a README...
CVE-2026-32646
CVE-2026-32646: Missing Authentication on Administrative Device Management Endpoint Advisory Field| Value ---|--- CVE| CVE-2026-32646 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 7.5 High Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE| CWE-306 Missing Authentication for Critical Function...
MCP-Inspector-CVE-2025-49596
MCP Inspector CVE-2025-49596 Vulnerability Checker This script checks if an MCP Inspector server is vulnerable to CVE-2025-49596, a security issue where the /sse endpoint responds to unauthenticated requests missing auth token. How It Works The script sends a GET request to the /sse endpoint of t...
CVE-2023-25263
This repository does not have a README...
CVE-2023-30033
This repository does not have a README...