CVE-2024-25832-PoC

CVE-2024-25830 and CVE-2024-25832 - DataCube3 Improper Access Control and Unrestricted File Upload. Overview This repository features a Proof of Concept PoC for a two-step exploit chain targeting DataCube3 devices. It combines CVE-2024-25830 Improper Access Control to extract root passwords and...

CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because requireauth returns early when APIAUTHKEY is unset. Attackers can post messages to /sessions/id/messages to trigger root shell...

EUVD-2026-106911

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because requireauth returns early when APIAUTHKEY is unset. Attackers can post messages to /sessions/id/messages to trigger root shell...

CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because requireauth returns early when APIAUTHKEY is unset. Attackers can post messages to /sessions/id/messages to trigger root shell...

CVE-2026-114108

The software HKUDS Vibe-Trading (versions 0.1.0 before 0.1.7) is vulnerable to a missing authentication flaw in its FastAPI server. The root cause is that the require_auth() function returns early when the API_AUTH_KEY is unset, granting unauthenticated attackers access to the application surface...

CVE-2026-114107

HKUDS Vibe-Trading versions 0.1.0 before 0.1.7 are vulnerable to an indirect prompt injection vulnerability. The root cause lies in BashTool and BackgroundRunTool , which pass model-emitted commands to subprocess.run with shell=True without an allow-list or approval step. Additionally, the read_u...

EUVD-2026-106910

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...

CVE-2026-114107

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...

CVE-2026-114107 HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...

CVE-2026-114107 HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...

CVE-2026-114069

The software Trigger.dev before version 4.6.0 is affected by an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvars endpoint. This flaw allows attackers possessing a restricted read:envvars key to access the environment's root API key (labeled as TRIGGER_SECRET_KE...

CVE-2026-114069 Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpoint

Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvars endpoint, which returns the environment's root API key as TRIGGERSECRETKEY for staging, production, and preview environments. Attackers holding a restricted read:envvars key c...

CVE-2026-114069 Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpoint

Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvars endpoint, which returns the environment's root API key as TRIGGERSECRETKEY for staging, production, and preview environments. Attackers holding a restricted read:envvars key c...

CVE-2026-113812

A flaw was found in Mozilla::CA. The Certificate Authority CA bundle includes a root certificate linked to compromised intermediate certificates. A remote attacker capable of intercepting or redirecting network traffic could exploit this flaw using the compromised keys to impersonate a Transport...

PT-2026-120233

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...

Fedora 44 : rust-rustls-webpki / rust-webpki-root-certs / rust-webpki-roots (2026-8eeffa4c43)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-8eeffa4c43 advisory. - Update the rustls-webpki crate to version 0.103.16. - Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security...

PT-2026-120234

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because require auth returns early when API AUTH KEY is unset. Attackers can post messages to /sessions/id/messages to trigger root shell...

PT-2026-120524

The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPER USER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USE PIPE or MAINTAIN who does NOT have WRITE DATA or DELETE DATA permissions on target databas...

PT-2026-120692

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series versions prior to X15.5.20 Description An unauthenticated remote attacker with network access to Cisco Expressway Core Expressway-C or Cisco Expressway Edge Expressway-E devices can execute arbitrary operating system...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...