CVE-2026-84360 Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcpmessage require only ordinary authentication before exposing nginxconfigadd and nginxconfigmodify. An OTP-enabled user with a normal JWT...

CVE-2024-41958-PoC

CVE-2024-41958-PoC This is a small proof of concept for CVE-2024-41958. It is possible to bypass the TFA authentication on the admin panel. Affected versions: 2024-07 Prerequisites needed for the CVE to function: Password and username for an account without TFA. Password and username for an accou...

EUVD-2026-97888

Rapyd Admin from 9.4.0 before 9.20.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through self-registered display names. Attackers can register with an HTML or JavaScript name rendered unescaped in the Activity log Author filter,...

EUVD-2026-97882

EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for example in a note-template preview, to...

CVE-2026-109559 EdgeEver Desktop 1.6.26 through 1.112.0 Navigation Allowlist Bypass via will-navigate

EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for example in a note-template preview, to...

CVE-2026-109559

EdgeEver Desktop versions 1.6.26 through 1.112.0 are vulnerable to a navigation allowlist bypass caused by insufficient string-prefix URL matching . Attackers can exploit this by embedding a link using userinfo syntax after the dev-server prefix—for instance, within a note-template preview—to loa...

CVE-2026-109557 EdgeEver through 1.112.0 Stored XSS via setMemoDragPreview Drag Preview

EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP createnotebook, renamenotebook or creatememo tools, running script on drag wi...

CVE-2026-109557

Versions of EdgeEver through 1.112.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability located in the setMemoDragPreview function. An attacker can inject malicious scripts by setting compromised notebook names or memo titles using the MCP create_notebook , rename_notebook , or c...

EUVD-2026-97880

EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP createnotebook, renamenotebook or creatememo tools, running script on drag wi...

CVE-2022-51020 Flower before 2.2.0 CSRF via Worker and Task Control API Endpoints

Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrfcookies is disabled and the OAuth session cookie lacks SameSite. Attackers can lure authenticated users to malicious pages that POST to /api/worker/shutdown, /api/worker/pool/restart, or /api/task/revoke t...

EUVD-2026-97910

Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which is protected only by a keyless, reversible encoding transform rather than...

CVE-2026-109426 Telegram-Stremio 5.1.0 Insecure Session Storage via encode_string

Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which is protected only by a keyless, reversible encoding transform rather than...

CVE-2026-109426

Telegram-Stremio versions through 5.1.0 are vulnerable to an insecure storage flaw. The application fails to properly encrypt authenticated Telegram session strings, instead using a keyless, reversible encoding transform. Attackers who gain access to the MongoDB database , backups , or logs can u...

CVE-2023-34845

CVE-2023-34845 Vulnerability POC for CVE-2023-34845 Vulnerability I found a cross-site scripting attack on the new content creating page http://localhost:800/admin/new-content it will execute the script in user context allowing the attacker to access any cookies or sessions tokens retained by the...

CVE-2024-48217

CVE-2024-48217 Sismart Vulnerability CVE Assigned: CVE-2024-48217 mitre.org nvd.nist.org tenable.com Date: 5 September 2024 Author: Ajriel Rizqy Maulana Software Link: SiSMART Aplikasi Pintar Penunjang Proses Pendidikan - 7.4.0 SiSMART Aplikasi Pintar Penunjang Proses Pendidikan API Version: 7.4....

agentwatch

agentwatch A flight recorder for Claude Code sessions. You let Claude Code run on your machine — sometimes for hours, sometimes with auto-approve. agentwatch silently logs every action, so you can come back and see exactly what happened. npm install -g agentwatch-dev agentwatch install That's it...

EUVD-2026-97830

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, Nginx UI does not apply RequireSecureSession to multiple authenticated mutation routes even though OTP-enabled users are expected to present a fresh X-Secure-Session-ID for sensitive actions. A stolen authenticated session...

CVE-2026-84315

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.5.0 , the application fails to apply the RequireSecureSession middleware to several sensitive mutation routes, including the api/cluster router. This allows an authenticated user with a stolen or persisted JWT to bypass...

CVE-2026-84315 Nginx UI OTP secure-session step-up is missing on sensitive mutation routes

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, Nginx UI does not apply RequireSecureSession to multiple authenticated mutation routes even though OTP-enabled users are expected to present a fresh X-Secure-Session-ID for sensitive actions. A stolen authenticated session...

CVE-2025-34077

CVE-2025-34077 Unauthenticated Admin Session Hijack - Pie Register Plugin ≤ 3.7.1.4 📌 Description This exploit targets a vulnerability in the Pie Register WordPress plugin versions ≤ 3.7.1.4, allowing unauthenticated session hijacking of admin accounts. 🛡️ This tool is for authorized testing and...