CVE-2026-59271 Admin password disclosed in BrokerNotAliveException message

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-59271

Spring AMQP (versions 2.4.18 and earlier, 3.2.0–3.2.12, 4.0.0–4.0.4, and 4.1.0) is affected by an information disclosure vulnerability. When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext within the BrokerNotAliveException message, potentiall...

CVE-2026-47894 Spring Cloud Config Server Native Environment Repository Exposure

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

EUVD-2026-66845

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

CVE-2026-47894

Spring Cloud Config Server is affected by a vulnerability in its native environment repository that allows exposure of configuration files outside the configured repository path. The issue affects versions 5.0.0–5.0.4 , 4.3.0–4.3.4 , 4.0.0–4.2.8 , and 3.1.14 and earlier . Per the CVSS 3.1 score o...

CVE-2026-7071-access-Control

Unauthentifizierte Lebenslauf-Offenlegung im CodeAstro Online-Jobportal PHP MySQL Details Anbieter: CodeAstro Produkt: Online-Jobportal-Projekt in PHP MySQL Version: 1.0 Schwachstellentyp: Unzureichende Zugriffskontrolle / Informationsoffenlegung CWE: CWE-284, CWE-200, CWE-548 Betroffener Endpunk...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Proof of Concept che dimostra una vulnerabilità di divulgazione di informazioni in Microsoft Desktop Window Manager dwm.exe. Panoramica Questo repository contiene un Proof of Concept PoC personalizzato sviluppato per riprodurre CVE-2026-20805, una vulnerabilità di divulgazione ...

CVE-2023-49103

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Wir fordern die sichere Rückkehr aller Bürger, die von der terroristischen Gruppe Hamas als Geiseln genommen wurden. Wir werden nicht ruhen, bis jede Geisel freigelassen und sicher nach Hause zurückgekehrt ist. Sie können helfen, sie nach Hause zu...

abyss-c2

ABYSS C2 — HiSilicon DVR एक्सप्लॉइट फ्रेमवर्क ⚠️ केवल शैक्षिक / प्रदर्शन प्रयोजनों के लिए यह सॉफ़्टवेयर विशेष रूप से शैक्षिक और अधिकृत सुरक्षा अनुसंधान प्रयोजनों के लिए प्रदान किया गया है। इसे नियंत्रित, अधिकृत वातावरण में सामान्य IoT भेद्यताओं और पोस्ट-एक्सप्लॉइटेशन तकनीकों को प्रदर्शित करने के...

CVE-2026-36374

Descrizione È stato identificato un endpoint pubblico che consente la ricerca di certificati utilizzando un identificatore prevedibile codice del certificato, senza alcun meccanismo di autenticazione o autorizzazione. Enumerando questo identificatore, un attaccante può accedere a dati personali d...

CVE-2023-51810

CVE-2023-51810 Beschreibung Eine Blind-SQL-Injection-Schwachstelle in StackIdeas EasyDiscuss v.5.0.5 ermöglicht es einem entfernten Angreifer, über den Suchparameter im Benutzermodul vertrauliche Informationen zu erlangen. Produkt StackIdeas EasyDiscuss v5.0.5 - EasyDiscuss - Joomla Forum...

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...

-nginxui_discover

Scanner di Rilevamento Interfacce Nginx UI - Rilevatore Versione CVE-2026-27944 https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/threading-multi--threaded-brightgreen Autore: NULL200OK Uno scanner multi-thread ad alte...

Zeek-Endpoint-Enrichment

Zeek-Endpoint-Enrichment Enriqueça os logs do Zeek com informações do host Para enriquecer todos os logs com um campo id, use a tag .-all. Para enriquecer todos os logs com um campo id e as Entidades Conhecidas, use a tag .-known-all. Para enriquecer apenas o conn.log, use a tag .-conn. Para...

CVE-2024-44313

Exploit 🛠️ 案例研究：CVE-2024-44313 与 EPSS 在漏洞优先级排序中的应用 本案例研究是为一场关于 EPSS（漏洞利用预测评分系统）的演讲而开发，旨在展示该评分如何在实际中影响漏洞的优先级排序。 漏洞 CVE-2024-44313 存在于 TastyIgniter 3.7.6 中，允许未认证用户访问订单发票，从而暴露财务和个人数据。 EPSS 评分：0.02%（百分位 2.7%） 评估日期：2025年3月19日...

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.- Der PoC zeigt, wie man PostgreSQL-Daten über das Hugefile-Subsystem auslesen kann. Basiert auf https://x.com/spendergrsec/status/1993794163880718700?s=20...

pentaho-exploits

https://research.aurainfosec.io/pentest/pentah0wnage 관련 익스플로잇 참고: 일부는 작동하지 않을 수 있습니다. 이 프로젝트를 진행할 시간을 제공해 주신 저의 고용주 Aura Information Security에 감사드립니다...

CVE-2026-15990

creationtimestamp| type| source ---|---|--- 2026-08-27 04:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzxmxp2jw2o...

CVE-2024-380639

creationtimestamp| type| source ---|---|--- 2026-08-27 04:00:05+00:00| seen| https://t.me/xhqcankao/12727 2026-08-28 00:01:01+00:00| seen| https://t.me/xhqcankao/12727...

SSRF-CVE-2020-15002

Краткое описание Логика проверки URL, применяемая при обработке /appsuite/api/oxodocumentfilter&action=addfile, имеет три дефекта, которые могут быть использованы для выполнения атаки SSRF типа «время проверки — время использования» ToCToU. Эта проблема позволяет злоумышленникам выполнять HTTP...