CVE-2026-72876

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, swarm.getNodes, swarm.getNodeInfo, swarm.getNodeApps, and swarm.getAppInfos in apps/dokploy/server/api/routers/swarm.ts accept another organization’s serverId without an activeOrganizationId ownership check, and...

EUVD-2026-55741

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, swarm.getNodes, swarm.getNodeInfo, swarm.getNodeApps, and swarm.getAppInfos in apps/dokploy/server/api/routers/swarm.ts accept another organization’s serverId without an activeOrganizationId ownership check, and...

CVE-2026-72876

Dokploy (free self-hosted PaaS) contains a high-severity vulnerability prior to 0.29.13 where cross-organization checks fail in swarm endpoints (swarm.getNodes, swarm.getNodeInfo, swarm.getNodeApps, swarm.getAppInfos) and getNodeInfo interpolates nodeId into execAsyncRemote. This allows a caller ...

PT-2026-69921

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS. The application fails to perform an activeOrganizationId ownership check when processing the serverId parameter in the following API endpoints...

CVE-2026-72734: Authorization Bypass Through User-Controlled Key

Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.28.7 until 0.29.13, the server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a caller-controlled serverId and calls haveActiveServices, findServerById, removeDeploymentsByServerId, and deleteServer...

CVE-2026-72866: Missing Authorization

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the WebSocket handler in apps/dokploy/server/wss/terminal.ts validates a session but does not authorize access to the requested server. An authenticated user can connect to /terminal?serverId=local, select the special...

Trend Micro Apex Central Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Cisco Data Center Network Manager DeviceModuleRest getDeviceModulesupport SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2016-3711

HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFTnamespaceSERVERID" cookie...

PT-2016-5671 · Red Hat +1 · Openshift Origin +2

Name of the Vulnerable Software and Affected Versions: HAproxy in Red Hat OpenShift Enterprise version 3.2 HAproxy in OpenShift Origin version 3.2 Description: The issue allows local users to obtain the internal IP address of a pod by reading the OPENSHIFT namespace SERVERID cookie...

Sql injection

SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary SQL commands via the serverid parameter...

CVE-2008-6260

SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary SQL commands via the serverid parameter...

CVE-2008-6260: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary SQL commands via the serverid parameter...

ultrastats-sql.txt

||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: [email protected] - Greetz to:...

Ultrastats 0.2.1440.3.11 - serverid SQL Injection

Ultrastats 0.2.1440.3.11 - serverid SQL Injection ||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: hexdez@nm...

Ultrastats 0.2.144/0.3.11 (index.php serverid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================== Ultrastats 0.2.144/0.3.11 index.php serverid SQL Injection Vulnerability ========================================================================== ||| ||| ||| |||...

Ultrastats 0.2.144/0.3.11 (index.php serverid) SQL Injection Vulnerability

No description provided by source. ||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: [email protected]...

Ultrastats 0.2.144/0.3.11 - 'serverid' SQL Injection

||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: [email protected]...

CVE-2007-4529

The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the 1 AdminAddServer, 2...

CVE-2007-4529: Undefined Security Weakness

The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the 1 AdminAddServer, 2...