druid-monitor-unauth: Druid Monitor Unauth

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/chaitin/xray/blob/master/pocs/druid-monitor-unauth.yml
• https://beaglesecurity.com/blog/vulnerability/druid-monitor-unauthorized-access.html
• https://www.cnblogs.com/scivous/p/14003794.html
• https://zhuanlan.zhihu.com/p/343953540
• https://github.com/caigo8/CVE-md/blob/main/JSite/durid%E6%9C%AA%E6%8E%88%E6%9D%83.md
• https://blog.csdn.net/qq_43936524/article/details/113820815

Related Vulnerabilities

• PoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API Exposure
• PoClangflow-api-exposure: Langflow - Unauthenticated API Exposure
• PoCCVE-2025-51683: mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCE
• PoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSS
• PoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
• PoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
• PoCCVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function Invocation
• PoCCVE-2026-19632: TranslatePress <= 3.3.1 - Unauthenticated Account Takeover
• PoCCVE-2026-21875: ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection
• PoCCVE-2026-23693: ElementsKit Lite <3.7.9 - Unauthenticated Mailchimp Proxy
• PoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()
• PoCCVE-2026-29963: HSC MailInspector - Unauthenticated Arbitrary File Read
• PoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal