git-hound

🐾 GitHound 패턴 매칭, 패치 공격, 일괄 포착 비밀 스내처. 개요 GitHound는 GitHub dork와 패턴 매칭, 컨텍스트 감지, 커밋 기록 분석을 결합하여 GitHub 전반에서 노출된 API 키, 비밀 및 자격 증명 을 사냥합니다. GitHub dork를 GitHound에 입력하면 쿼리와 일치하는 모든 파일과 리포지토리에서 비밀을 스캔합니다. 일반적인 스캐너와 달리 GitHound는 GitHub의 Code Search API 를 활용하여 소수의 타겟이 아닌 모든 공개 리포지토리에 대한 전체 가시성을 제공합니다...

Zoho ManageEngine - getUserAPIKey Authentication Bypass

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 125657, 126002, 126104, and 126118 allow unauthenticated attackers to obtain a user's API key, and then access external...

Leaked-Credentials

Google Chrome의 개발자 도구Developer Tools와 정규식을 사용하여 유출된 자격 증명을 검색하려면 다음 간단한 단계를 따르세요: 1. DevTools 열기: Chrome에서 검사 중인 사이트로 이동한 다음 Ctrl+Shift+IWindows/Linux 또는 Cmd+Option+ImacOS를 눌러 개발자 도구를 엽니다. 2. 네트워크 탭으로 이동: "Network" 탭을 클릭합니다. 3. 정규식 검색 활성화: 필터 막대에서 정규식 아이콘을 클릭하여 정규식 모드를 활성화합니다. 4. 페이지 새로고침: 모든 네트워...

threat-intel-brief-cve-2026-42208-litellm

위협 인텔리전스 브리핑 - CVE-2026-42208: BerriAI LiteLLM SQL 인젝션 CVE: CVE-2026-42208 GHSA: GHSA-r75f-5x8p-qvmc CVSS 점수: 9.3 치명적 영향을 받는 소프트웨어: BerriAI LiteLLM 버전 = 1.81.16, 1.83.7 수정 버전: 1.83.7-stable 2026년 4월 19일 릴리스 CISA KEV 등록: 2026년 5월 8일 출처: CISA KEV, Sysdig TRT, The Hacker News, Security Affairs 요약...

CVE-2026-103281 Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin API

Ghost npm package 'ghost' versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users...

CVE-2026-103281 Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin API

Ghost npm package 'ghost' versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users...

CVE-2026-103281 Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin API

Ghost npm package 'ghost' versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users...

CVE-2026-103281

The Ghost (npm package 'ghost') content management system versions 3.23.0 up to, but not including, 6.23.0 contains a vulnerability where it exposes API keys to users with low-privilege staff accounts. The root cause allows an authenticated low-privilege staff user to read API keys returned by th...

CVE-2025-44823

Nagios Log Server 2024R1.3.1의 인증된 API 키 노출 ▶️ PoC 데모 CVE ID: CVE-2025-44823 날짜: 2025-04-02 작성자: Alex Tisdale, Seth Kraft 공급업체 홈페이지: https://www.nagios.com/ 공급업체 변경 로그: https://www.nagios.com/changelog/log-server 소프트웨어 링크: https://assets.nagios.com/downloads/nagios-log-server/versions.php 버전:...

CVE-2026-89278: Exposure of Sensitive Information to an Unauthorized Actor

The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.34.6 via the enqueuefrontendscripts. This makes it possible for unauthenticated attackers to...

CVE-2026-64684 RMCP: Custom HTTP headers leak to cross-origin redirect targets

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/src/transport/common/reqwest/streamablehttpclient.rs builds its defaulthttpclient with reqwest's automatic redirect policy and applies caller-supplied values...

CVE-2026-92570

reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like...

CVE-2026-92570 reNgine through 2.2.0 Unauthorized Configuration File Read

reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like...

CVE-2026-92570 reNgine through 2.2.0 Unauthorized Configuration File Read

reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like...

Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234 , the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers it pays for. Tha...

Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options — including apikey — into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payload...

GHSA-FXG7-897C-57MP Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options — including apikey — into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payload...

Security Bulletin: Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

Summary Langflow and its bundled connectors perform server-side HTTP requests using URLs supplied by authenticated users without consistently applying the platform's connector SSRF validation guard. The MCP server configuration URL field accepts any HTTP or HTTPS target including RFC 1918,...

CVE-2026-85700 Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints

Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in customheaders, allowing any authenticated user to read admin-defined API keys. Attackers with basic authentication can call GET /tool/toolid or GET /tool endpoints to retrieve plaintext authorization headers and...

CVE-2026-85700 Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints

Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in customheaders, allowing any authenticated user to read admin-defined API keys. Attackers with basic authentication can call GET /tool/toolid or GET /tool endpoints to retrieve plaintext authorization headers and...