Lucene search
+L

159 matches found

Kitploit
Kitploit
•added 2026/10/03 7:02 a.m.•16 views

TERM1B1TB0T

TERMI₿IT₿OT 🤖 一个基本工具,可通过 WebSocket API 在你的终端上实时跟踪高于或低于特定价格目标的比特币交易。 分步指南:WINDOWS -步骤 1:安装 Python(如果尚未安装) Download from python.org During install → make sure to check ✅ “Add Python to PATH” -打开 Windows Terminal / PowerShell -导航到你的机器人文件夹 cd \Users\Desktop\TERM1B1TB0T -步骤 2:安装依赖项(仅需一次) pip install...

6AI score
SaveExploits0
EUVD
EUVD
•added 2026/10/03 12:31 a.m.•7 views

EUVD-2026-91822

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

8.7CVSS5.9AI score0.00321EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/02 10:16 p.m.•4 views

CVE-2026-97363

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

8.7CVSS0.00321EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/02 9:32 p.m.•26 views

CVE-2026-97363 Monta monta.app Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

8.7CVSS0.00321EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/26 12:32 a.m.•23 views

EUVD-2026-39568

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

8.7CVSS5.9AI score0.00711EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/25 10:17 p.m.•25 views

CVE-2026-50176

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

8.7CVSS0.00711EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/25 8:58 p.m.•69 views

CVE-2026-50176 EVoke Systems EVoke CSMS Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

8.7CVSS0.00711EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/25 8:58 p.m.•12 views

CVE-2026-50176

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

8.7CVSS5.9AI score0.00711EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•3 views

CVE-2026-50176: Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

8.7CVSS5.9AI score0.00711EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/23 9:16 p.m.•23 views

CVE-2026-11807

A missing authorization vulnerability was found in the Event-Driven Ansible EDA websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary activationid to receive...

9.6CVSS0.00531EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/06/23 7:40 p.m.•41 views

EUVD-2026-38598

A missing authorization vulnerability was found in the Event-Driven Ansible EDA websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary activationid to receive...

9.6CVSS5.9AI score0.00531EPSS
SaveExploits0References4
CVE
CVE
•added 2026/06/23 7:40 p.m.•114 views

CVE-2026-11807

CVE-2026-11807 affects Event-Driven Ansible (EDA) websocket API. The /api/eda/ws/ansible-rulebook endpoint fails to verify permissions when processing Worker messages, permitting any authenticated user to forge a message with an arbitrary activation_id and access plaintext credentials tied to tha...

9.6CVSS6AI score0.00531EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/06/23 7:40 p.m.•14 views

CVE-2026-11807

A missing authorization vulnerability was found in the Event-Driven Ansible EDA websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary activationid to receive...

9.6CVSS5.9AI score0.00531EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/06/23 7:40 p.m.•11 views

CVE-2026-11807 Eda-server: websocket missing authorization allows credential theft via activation_id spoofing

A missing authorization vulnerability was found in the Event-Driven Ansible EDA websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary activationid to receive...

9.6CVSS6AI score0.00531EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/06/23 6:39 p.m.•14 views

eda-server: websocket missing authorization allows credential theft via activation_id spoofing

A missing authorization vulnerability was found in the Event-Driven Ansible EDA websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary activationid to receive...

9.6CVSS5.9AI score0.00531EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/23 12:00 a.m.•4 views

CVE-2026-11807: Missing Authorization

A missing authorization vulnerability was found in the Event-Driven Ansible EDA websocket API. The /api/eda/ws/ansible-rulebook endpoint does not verify user permissions when processing Worker messages. Any authenticated user can send a forged message with an arbitrary activationid to receive...

9.6CVSS5.9AI score0.00531EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/23 12:00 a.m.•39 views

PT-2026-51585

Name of the Vulnerable Software and Affected Versions Event-Driven Ansible affected versions not specified Description A missing authorization issue exists in the websocket API. The '/api/eda/ws/ansible-rulebook' endpoint fails to verify user permissions when processing Worker messages. This allo...

9.6CVSS6AI score0.00531EPSS
SaveExploits0References19
NVD
NVD
•added 2026/06/16 10:16 a.m.•24 views

CVE-2026-10825

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot...

7.1CVSS0.0024EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/16 8:51 a.m.•28 views

EUVD-2026-37043

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot...

7.1CVSS5.3AI score0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/16 8:51 a.m.•12 views

CVE-2026-10825 Improper JSON Input Validation in WebSocket API Leads to Denial of Service

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot...

7.1CVSS5.8AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder