39 matches found
CVE-2026-101063 Obot before v0.23.0 Authentication Bypass via Registry API
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...
CVE-2026-101063
Obot versions prior to v0.23.0 contain an authentication bypass vulnerability in the MCP Registry endpoints under /v0.1/*. When registry authentication is enabled, the system fails to properly enforce it for these specific endpoints. This allows unauthenticated attackers to perform GET requests t...
PT-2026-69944
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy, a self-hostable Platform as a Service PaaS, contains a flaw that allows an authenticated user to execute arbitrary commands on a local or SSH-connected target server. This occurs because t...
EUVD-2016-0111
Malware in sbrugna...
EUVD-2022-0783
Malicious code in bioql PyPI...
CVE-2020-29662
In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path...
The Windows Registry Adventure #3: Learning resources
Posted by Mateusz Jurczyk, Google Project Zero When tackling a new vulnerability research target, especially a closed-source one, I prioritize gathering as much information about it as possible. This gets especially interesting when it's a subsystem as old and fundamental as the Windows registry...
Malicious code in Be.Vlaanderen.Basisregisters.PostalRеgistry.Api.CrаbImport (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisregisters.ParcеlRegіstry.Api.BackOffice.Abstractions (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisregisters.BuildingRegіstry.Apі.BackOffice.Abstraсtiоns (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisregistеrs.AddressRegistry.Api.CrabImpоrt (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basisrеgisters.ParcelRegistry.Api.Extraсt (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Basіsregisters.AddrеssRegistry.Aрі.Oslo (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Bаsisregisters.BuildingRеgistrу.Api.Legаcy.Abstractions (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderen.Bаsisrеgisters.BսildingRegistry.Aрi.Oslo (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaaոderen.Basisregisters.BuildiոgRegistry.Api.Extract.Abstractions (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaaոderen.Basisregisters.BuilԁiոgRegіstry.Api.Extract.Abstractions (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaaոderen.Basisrеgisters.ParcelRegistry.Aрi.Extraсt (NuGet)
--- -= Per source details. Do not edit below this line.=-...