1078 matches found
qu1ckdr0p2
About Rapidly host payloads and post-exploitation bins over HTTP or HTTPS. Designed to be used on exams like OSCP / PNPT or CTFs HTB / etc. Pull requests and issues welcome. As are any contributions. Qu1ckdr0p2 comes with an alias and search feature. The tools are located in the qu1ckdr0p2-tools...
CVE-2026-47668
CVE-2026-47668 — DbGate Remote Code Execution Unauthenticated RCE in DbGate JSON Script Runner dbgate-serve ≤ 7.1.8. Assessment tool: CVE-2026-47668.py — authorized testing only. | ---|--- CVE| CVE-2026-47668 Severity| Critical Product| DbGate / dbgate-serve Affected| ≤ 7.1.8 Fixed| ≥ 7.1.9 CVSS...
CVE-2026-108749
docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access /v1/memory/stats and /v1/memory/counts because they omit the requireauth dependency. Attackers can bypass the configured DOCLINGSERVEAPIKEY to read process and cgrou...
CVE-2026-108749
A flaw was found in docling-serve. An unauthenticated remote attacker can access sensitive process memory metrics and trigger internal garbage collection routines by querying memory monitoring endpoints that fail to enforce authentication controls. Successful exploitation allows an attacker to...
CVE-2026-108749 docling-serve 1.14.0 through 1.36.0 Missing Authentication via Memory Management Endpoints
docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access /v1/memory/stats and /v1/memory/counts because they omit the requireauth dependency. Attackers can bypass the configured DOCLINGSERVEAPIKEY to read process and cgrou...
CVE-2026-108749
The docling-serve software (versions 1.14.0 through 1.36.0) contains a missing authentication vulnerability. The /v1/memory/stats and /v1/memory/counts endpoints omit the require_auth dependency, allowing unauthenticated attackers to bypass the configured DOCLING_SERVE_API_KEY . Exploitation can ...
EUVD-2026-96914
docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access /v1/memory/stats and /v1/memory/counts because they omit the requireauth dependency. Attackers can bypass the configured DOCLINGSERVEAPIKEY to read process and cgrou...
CVE-2026-108749 docling-serve 1.14.0 through 1.36.0 Missing Authentication via Memory Management Endpoints
docling-serve 1.14.0 through 1.36.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access /v1/memory/stats and /v1/memory/counts because they omit the requireauth dependency. Attackers can bypass the configured DOCLINGSERVEAPIKEY to read process and cgrou...
CVE-2026-96286 Apache Thrift: Perl servers end `serve()` when serving one connection fails
Uncaught exception vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-96286 Apache Thrift: Perl servers end `serve()` when serving one connection fails
Uncaught exception vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-96277 Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception
Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
SUSE CVE-2026-77860
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing one of the counter measures that was introduced for DNSBomb CVE-2024-33655. A malicious actor can...
GHSA-58MR-GQGX-XQ4G vulnerabilities
Vulnerabilities for packages: vitess, renovate, keep, commercial-gitlab-rails-ee, wazuh-dashboard, unleash-proxy, gitlab-rails-ce-fips, keep-fips, wazuh-dashboard-fips, prism, opensearch-dashboards, yaml-language-server, commercial-gitlab-rails-ee-fips, serve, unleash, gitlab-rails-ce,...
CVE-2026-84292 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, renovate, keep, vitess, commercial-gitlab-rails-ee, wazuh-dashboard, unleash-proxy, gitlab-rails-ce-fips, keep-fips, wazuh-dashboard-fips, prism, opensearch-dashboards, yaml-language-server, commercial-gitlab-rails-ee-fips, serve, unleash,...
GHSA-QW65-CVWX-89V3 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, renovate, keep, vitess, commercial-gitlab-rails-ee, wazuh-dashboard, unleash-proxy, gitlab-rails-ce-fips, keep-fips, wazuh-dashboard-fips, prism, opensearch-dashboards, yaml-language-server, commercial-gitlab-rails-ee-fips, serve, unleash,...
CVE-2026-84394 vulnerabilities
Vulnerabilities for packages: vitess, renovate, keep, commercial-gitlab-rails-ee, wazuh-dashboard, unleash-proxy, gitlab-rails-ce-fips, keep-fips, wazuh-dashboard-fips, prism, opensearch-dashboards, yaml-language-server, commercial-gitlab-rails-ee-fips, serve, unleash, gitlab-rails-ce,...
CVE-2026-84292 vulnerabilities
Vulnerabilities for packages: vitess, serve, renovate, yaml-language-server, prism, opensearch-dashboards, jupyter-base-notebook...
GHSA-58MR-GQGX-XQ4G vulnerabilities
Vulnerabilities for packages: vitess, serve, renovate, yaml-language-server, prism, opensearch-dashboards...