CVE-2026-77884 Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

EUVD-2026-77755

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

CVE-2026-77884

Gallery – Private Photo Vault v1.0.41 (Android) starts an unauthenticated HTTP server on TCP port 8080 reachable from the adjacent network. The server exposes files and directory listings from Android external storage , allowing any device on the same local network to read private photo data with...

CVE-2026-22812

🔐 CVE-2026-22812 - OpenCode 未认证 HTTP 服务器 → 远程代码执行 RCE CVE-2026-22812 的安全公告、技术分析、检测指南与缓解说明 📌 概述 CVE-2026-22812 是一个影响 早于1.0.216 版本的 OpenCode 的高危远程代码执行 RCE 漏洞 。 问题在于 OpenCode 会自动启动一个未认证的本地 HTTP 服务器 ，以下来源均可访问它： 本地恶意进程 通过宽松 CORS 策略访问的浏览器标签页 被注入的 Web 内容 localhost 跨源请求 攻击者可借此以当前用户的权限执行任意 shell 命令 🚨 严重程度...

CVE-2026-34045

Podman Desktop is a graphical tool for developing on containers and Kubernetes. Prior to 1.26.2, an unauthenticated HTTP server exposed by Podman Desktop allows any network attacker to remotely trigger denial-of-service conditions and extract sensitive information. By abusing missing connection...

PT-2026-2315

Name of the Vulnerable Software and Affected Versions OpenCode versions prior to 1.0.216 Description OpenCode, an open source AI coding agent, has an issue where it automatically starts an unauthenticated HTTP server. This allows any local process, or any website due to permissive CORS settings, ...