942 matches found
kraken
Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...
Minio-Security-Vulnerability-Checker
Minio Security Vulnerability Checker Description This program is a tool created to check the security of Minio systems related to vulnerability CVE-2022-35919. This tool is designed to help users detect potential vulnerabilities in their Minio configuration. Usage 1. Make sure you have Python...
CVE-2023-28432
CVE-2023-28432 MiniO verify interface sensitive information disclosure vulnerability CVE-2023-28432 Chinese name: MinIO verify 接口敏感信息泄露漏洞（CVE-2023-28432） Description : MinIO is an open source object storage service that is compatible with the Amazon S3 API and can be used in private or public...
MinIO Operator Console Authentication Bypass
MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...
MinIO Browser API - Server-Side Request Forgery
MinIO Browser API before version RELEASE.2021-01-30T00-20-58Z contains a server-side request forgery vulnerability. id: CVE-2021-21287 info: name: MinIO Browser API - Server-Side Request Forgery author: pikpikcu severity: high description: MinIO Browser API before version...
MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...
CVE-2023-28432
CVE-2023-28432 CVE-2023-28432 POC Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIOSECRETKEY and MINIOROOTPASSWORD, resulting in...
minio_unauth_check
miniounauthcheck CVE-2023-28432, herramienta de detección de fugas de información de MinIO Esta herramienta es solo para fines educativos y de investigación, para mejorar la conciencia de seguridad y las prácticas de desarrollo de software. Antes de usar esta herramienta, asegúrese de cumplir con...
Minio-CVE-2023-28432
Minio-CVE-2023-28432 Herramienta de detección para la fuga de información de Minio-CVE-2023-28432. Solo para fines de aprendizaje y pruebas autorizadas. Análisis personalhttps://lhxhl.github.io/2023/04/03/minio2023/ Uso Requiere el entorno de lenguaje Golang go build main.go ./main -h //使用帮助 ./ma...
CVE-2023-28432-minio_update_rce
minio-CVE-2023-28432-rce https://github.com/AbelChe/evilminio/tree/main Original project repository Personal packaging archive Affected versions: 2019-12-17T23-16-33Z to RELEASE.2023-03-20T20-16-18Z Reproduction: https://www.yuque.com/jason-soozc/luhd40/pgabr9xvg0kgx85v?singleDoc "MinIO...
CVE-2023-28432-metasploit-scanner
CVE-2023-28432-metasploit-scanner MinIO Information Disclosure Vulnerability scanner by metasploit preparation POC git clone https://github.com/TaroballzChen/CVE-2023-28432-metasploit-scanner cd CVE-2023-28432-metasploit-scanner mkdir -p /.msf4/modules/auxiliary/scanner/http cp...
CVE-2023-28432
CVE-2023-28432 MinIO tiene una vulnerabilidad de fuga de información. Un atacante remoto no autenticado puede obtener todas las variables de entorno, incluyendo MINIOSECRETKEY y MINIOROOTPASSWORD, mediante el envío de una solicitud HTTP especial, lo que provoca una fuga de información sensible y...
MinIO_CVE-2023-28432_EXP
This repository does not have a README...
MinIO Cluster Deployment - Information Disclosure
MinIO is susceptible to information disclosure. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIOSECRETKEY and MINIOROOTPASSWORD. An attacker can potentially obtain sensitive...
CVE-2023-28432
CVE-2023-28432 fuga de información de MinIO filtración de credenciales de cuenta El sistema MinIO presenta una vulnerabilidad de fuga de información. Un atacante remoto no autenticado puede obtener toda la información sensible, incluidos MINIOSECRETKEY y MINIOROOTPASSWORD, enviando una solicitud...
CVE-2025-62506
Script de Verificación de Vulnerabilidad CVE-2025-62506 Descripción General Este repositorio contiene un script de verificación para CVE-2025-62506, una vulnerabilidad de escalada de privilegios en cuentas de servicio de MinIO y cuentas STS Servicio de Token de Seguridad. Descripción de la...
CVE-2023-28432
CVE-2023-28432 Minio es un servicio de almacenamiento de objetos basado en el lenguaje Go. Implementa la mayoría de las interfaces del servicio de almacenamiento en la nube Amazon S3, y puede considerarse como la versión de código abierto de S3, muy adecuado para almacenar grandes volúmenes de...
HTB-Facts-Writeup
HackTheBox — Facts Machine Writeup Machine Info Field| Details ---|--- Name| Facts OS| Linux Difficulty| Easy Release| Season 10 Retired| No Attack Chain Overview Recon → Web Enumeration → CVE-2025-2304 Mass Assignment → S3/MinIO Credential Leak → SSH Key Extraction → Passphrase Cracking → User...