Lucene search
+L

26 matches found

Veracode
Veracode
added 2026/02/06 11:06 a.m.14 views

Information Disclosure

Hono is vulnerable to an Information Disclosure. The vulnerability is due to improper validation of user-controlled paths in the Serve Static Middleware for the Cloudflare Workers adapter, which allows an attacker to exploit path handling and read arbitrary keys from the Workers environment...

6.3CVSS5.7AI score0.00426EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/01/27 7:37 p.m.12 views

EUVD-2026-4751

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, Serve static Middleware for the Cloudflare Workers adapter contains an information disclosure vulnerability that may allow attackers to read arbitrary keys from the Workers environment...

6.3CVSS5.9AI score0.00426EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/27 12:00 a.m.14 views

Hono security vulnerability

Hono is a web framework built with TypeScript in the Hono community. Versions of Hono prior to 4.11.7 contained a security vulnerability. This vulnerability stemmed from a static service middleware in the Cloudflare Workers adapter, which allowed information leakage, potentially enabling attacker...

6.3CVSS5.9AI score0.00426EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2025/11/25 4:49 p.m.29 views

Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys

New research has found that organizations in various sensitive sectors, including governments, telecoms, and critical infrastructure, are pasting passwords and credentials into online tools like JSONformatter and CodeBeautify that are used to format and validate code. Cybersecurity company...

6.7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/10/22 10:17 a.m.354 views

Exploit for SQL Injection in Sqlalchemy

What Part A - Prereqs - hud cli - Docker Part A - Setu...

9.8CVSS9.3AI score0.03525EPSS
SaveExploits2
OSV
OSV
added 2024/09/10 9:15 a.m.8 views

CVE-2024-43389

A low privileged remote attacker can perform configuration changes of the ospf service through OSPFINTERFACE.SIMPLEKEY, OSPFINTERFACE.DIGESTKEY environment variables which can lead to a DoS...

8.1CVSS5.8AI score0.00519EPSS
SaveExploits0References1
Rows per page
Query Builder