Dockerized-CVE-2019-14287

Dockerized CVE-2019-14287 Containerized and deployable use of the CVE-2019-14287 vuln. View README.md for more. This CVE affects all versions of sudo under 1.8.28 where a sudo user can escalate to root by referencing its user ID. This Dockerfile allows this CVE to be built, where it can be used f...

EUVD-2026-117651

EdgeChat before 2.20.3 contains a missing authentication vulnerability in the GET /files/:key route that allows unauthenticated or banned users to download decrypted public-channel attachments because canAccessFile accepts a null user id. Attackers holding an attachment object key can omit or...

CVE-2026-123024

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

EUVD-2026-117463

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

CVE-2026-123024 agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

CVE-2026-123024

A vulnerability exists in agentscope-ai AgentScope up to version 2.0.11 affecting the Agent Service component. Specifically, the get_current_user_id function in src/agentscope/app/deps.py is susceptible to missing authentication when an attacker manipulates the X-User-ID argument. This flaw allow...

CVE-2026-123024 agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

PT-2026-137212

Name of the Vulnerable Software and Affected Versions VitaFit cloud API versions prior to 2026-10-30 Description An insecure direct object reference allows authenticated attackers to access data belonging to other users. By exploiting predictable relationships between user id and profile id...

CVE-2026-73034-PoC

CVE-2026-73034 — DB-GPT v0.8.1 Unauthenticated Path Traversal → Arbitrary File Write CVSS 9.8 Critical · CWE-22 · GHSA/Issue 3104 Summary POST /api/v1/python/file/upload in DB-GPT v0.8.1 takes the user-id HTTP header and uses it raw as a path component : uploaddir = os.path.joinbasedir,...

CVE-2026-118168

The MapPress Maps for WordPress plugin (versions before 2.97.15 ) is vulnerable to an unauthenticated email address disclosure flaw. The front-end map embed handler fails to restrict which user's data it renders, allowing attackers to retrieve the email address and display name of any user on the...

CVE-2026-118168 MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure

The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs...

CVE-2026-118168 MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure

The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs...

Sudo-Security-Bypass-CVE-2019-14287

Sudo-Security-Bypass-CVE-2019-14287 =========================================================================== ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██╗ █████╗ ██╗██╗ ██╗██████╗ █████╗ ███████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗███║██╔══██╗ ███║██║ ██║╚════██╗██╔══██╗╚════██║ ██║ ██║...

CVE-2025-4162027

Security Advisory: CVE-2025-4162027 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...

CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool Overview This tool is a non-destructive exposure survey utility for assessing whether a target PAN-OS service may expose network-accessible surfaces related to CVE-2026-0300. The tool is intended for authorized defensive security validatio...

PT-2026-134833

The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs...

panos-captive-portal-rce

CVE-2026-0300 — PAN-OS User-ID Captive Portal Buffer Overflow RCE Scanner 🎯 Overview Buffer overflow in User-ID Authentication Portal Captive Portal service of PAN-OS. Unauthenticated attacker can execute code as root on affected Palo Alto Networks firewalls. Field| Value ---|--- CVE| CVE-2026-03...

CVE-2026-0300

🚨 CVE-2026-0300 - Critical Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS Buffer Overflow in User-ID™ Authentication Portal Captive Portal — Actively Exploited in the Wild 📋 Overview A critical buffer overflow vulnerability CWE-787 in the User-ID Authentication Portal of PAN-O...

CVE-2025-4162028

Security Advisory: CVE-2025-4162028 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...

GrafanaSCIMalform

Grafana SCIMalform CVE-2025-41115 Overview This repo is my research on CVE-2025-41115 vulnerability in Grafana Enterprise SCIM component. It consist of a test stand with vulnerable app and exploit code. References Just some usefull refs: NIST - NIST index Grafana Article - Original blog post...