PT-2025-23098 · Apache +2 · Apache +2

Name of the Vulnerable Software and Affected Versions: Mautic affected versions not specified Description: The issue concerns the potential exposure of sensitive information, including database credentials, API keys, and other critical system configurations, due to the direct accessibility of .en...

CVE-2024-47056: Cleartext Storage of Sensitive Information

SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of sensitive information, including database credentials, API keys, and other critical system...

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...

CVE-2024-48987

Snipe-IT before 7.0.10 allows remote code execution associated with cookie serialization when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values...

CVE-2023-22746

CKAN is an open-source DMS data management system for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't set a custom value via environment variables in the .env file...

MAL-2025-4338 Malicious code in env-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c55ff102f0d25988d4591334d7aeafa4f43877f5d7f248e861ae77a9dabfea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in env-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c55ff102f0d25988d4591334d7aeafa4f43877f5d7f248e861ae77a9dabfea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-47755

V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!VS4SaveEnvFile function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution...

MAL-2025-191845 Malicious code in python3-shodan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b4fca245262ff8de532efc88e1941697e6994786e09eca8a9cbcdbf9faff5cca Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

@astrobase/core (>=0.2.0, <=0.4.0), @indiebackend/domain-ids (>=0.0.1, <=1.0.3) +2 more potentially affected by CVE-2025-27611 via base-x (5.0.0)

base-x NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on base-x and may be impacted: - @astrobase/core =0.2.0, =0.0.1, =0.0.11, =0.5.0, =0.5.15 Source cves: CVE-2025-27611 Source advisory: OSV:GHSA-XQ7P-G2VC-G82P...

VulnCheck KEV: CVE-2017-16894

In Laravel framework through 5.5.21, remote attackers can obtain sensitive information such as externally usable passwords via a direct request for the /.env URI. NOTE: this CVE is only about Laravel framework's writeNewEnvironmentFileWith function in...

Malicious code in @takamol/qiwa-env-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b86c910b37e0839cc34589794e9d597808f078c030da985d763aa3220ebd827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vitess allows HTML injection in /debug/querylogz & /debug/env

...

AZL-58419 CVE-2025-22870 affecting package influxdb for versions less than 2.7.5-4

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

MAL-2025-2332 Malicious code in stdo-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19eec4371023b33251d813ec37b31b1b2f9b3ac6918894855d46cad967e8e486 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stdo-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19eec4371023b33251d813ec37b31b1b2f9b3ac6918894855d46cad967e8e486 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in env-check-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04728a28db58b9a9e546a8840e5cca54ab1f7dcf20fbb0817639e0c738a3bc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2256 Malicious code in env-check-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04728a28db58b9a9e546a8840e5cca54ab1f7dcf20fbb0817639e0c738a3bc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the httpGetEnv() function in the microprogramming software of TP-Link’s wireless signal booster device TL-WA850RE allows a hacker to induce a service failure.

The vulnerability of the httpGetEnv function in the microprogramming software of TP-Link’s wireless signal booster device TL-WA850RE is related to the operation that goes beyond the buffer in memory when processing the end-point data/syslog.filter.json file with the type parameter. Exploiting thi...

The vulnerability of the httpGetEnv() function (userRpm/WanDynamicIpV6CfgRpm.htm) in TP-Link TL-WR841ND router software allows a attacker to cause a service failure.

The vulnerability of the httpGetEnv function userRpm/WanDynamicIpV6CfgRpm.htm in the TP-Link TL-WR841ND router software is related to buffer overflows caused by improper cleaning or resource release when processing the gw parameter. Exploiting this vulnerability allows a remote attacker to cause...