Lucene search
+L

7 matches found

EUVD
EUVD
added yesterday6 views

EUVD-2026-47653

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...

3.3CVSS5.2AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/29 1:18 p.m.10 views

CVE-2026-56457

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step...

4.3CVSS5.8AI score0.0018EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/29 1:18 p.m.18 views

CVE-2026-56457

The CVE concerns HCL DevOps Deploy / HCL Launch with a vulnerability that allows exposure of sensitive information via output logs. The description notes that an attacker with access to the logs could potentially obtain sensitive values associated with a step. The Connected CVE lists confirm the ...

4.3CVSS5.8AI score0.0018EPSS
SaveExploits0References1Affected Software2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-29496

Malicious code in bioql PyPI...

6.6AI score
SaveExploits0References3
OSV
OSV
added 2025/07/21 7:19 p.m.4 views

GHSA-C5QX-P38X-QF5W RageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs

Summary Log output includes authentication token that provides full account access Details The post job action prints the contents of config/config.vdf which holds the saved authentication token and can be used to sign in on another machine. This means any public use of this action leaves...

8.7CVSS6.8AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/07/21 7:19 p.m.13 views

RageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs

Summary Log output includes authentication token that provides full account access Details The post job action prints the contents of config/config.vdf which holds the saved authentication token and can be used to sign in on another machine. This means any public use of this action leaves...

6.8AI score
SaveExploits0References3Affected Software1
Kitploit
Kitploit
added 2021/10/18 11:30 a.m.31 views

ImpulsiveDLLHijack - C# Based Tool Which Automates The Process Of Discovering And Exploiting DLL Hijacks In Target Binaries

C based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during RedTeam Operations to evade EDR's. 1. Methodological Approach : The tool basically acts on automating following stages performed for...

7.6AI score
SaveExploits0References1
Rows per page
Query Builder