2629 matches found
thedorkbox
thedorkbox TheDorkbox 기밀 데이터를 찾기 위한 Google Dorks & OSINT 기법의 포괄적인 모음입니다. thedorkbox에 오신 것을 환영합니다 👋 이는 다양한 Google dork가 HTML 템플릿에 포함된 OSINT 도구로, 비기술적 사용자도 OSINT 기법의 중요성과 정보가 조직 범죄 및 사이버 범죄 수사에 어떻게 유용할 수 있는지 이해할 수 있도록 합니다. ✨ 사용법 python3 -m http.server 8000 & open your browser and point it to...
bucket-stream
🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...
EUVD-2026-94071
Backstage has improper input validation in scaffolder task list ordering...
ROS-20261002-73-0144
The vulnerability of the SOGo collaborative software server relates to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and affect the integrity of the data...
ROS-20261001-73-0055
The vulnerability of the management server’s software for collaborative work, SOGo, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and affect the integrity of the data...
Rocky Linux 8 [CIQ] Security Update: haproxy / haproxy-debuginfo / haproxy-debugsource (crlsa-2024_8849)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248849 advisory. haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers CVE-2023-45539 Tenable has extracted the preceding description block...
ROS-20260930-73-0005
The vulnerability of the wireless/wext-core.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
ROS-20260928-73-0090
The vulnerability of the Linux operating system’s kernel Bluetooth module is related to reading data from buffer fields beyond their allowable limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...
ROS-20260928-73-0107
The vulnerability of the kernel/futex component of the Linux operating system’s kernel is related to insufficient checking of the state of the shared resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
ROS-20260928-73-0007
The vulnerability of the drivers/scsi/pm8001 component in the Linux operating system is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
ROS-20260928-73-0004
The vulnerability of the drivers/gpu/drm/vmwgfx cores in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
ROS-20260928-73-0089
The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
ROS-20260928-73-0001
The vulnerability of the mark.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
CVE-2025-71422
Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume feature is vulnerable to a malicious host supplying a crafted LUKS2 volume to a pod VM. LUKS2 volume metadata is not authenticated and, with cryptsetup versions prior to 2.8.1, a...
CVE-2025-71422 Contrast before 1.12.1 Insecure LUKS2 Persistent Storage
Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume feature is vulnerable to a malicious host supplying a crafted LUKS2 volume to a pod VM. LUKS2 volume metadata is not authenticated and, with cryptsetup versions prior to 2.8.1, a...
The vulnerability of the confidential data storage mechanism in the Jenkins automation server configuration allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the confidential data storage mechanism in the Jenkins automation server configuration is related to the lack of measures taken to encrypt secret data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...
ROS-20260924-73-0080
The vulnerability of the i40e components of the Linux operating system’s kernel is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
ROS-20260924-73-0067
The vulnerability of the i40e component in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
ROS-20260924-73-0066
The vulnerability of the i40e component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
ROS-20260924-73-0075
The vulnerability of the mcbausb component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...