496 matches found
BucketLoot
BucketLoot Un Inspector Automatizado de Buckets Compatibles con S3 DescripciΓ³n β’ InstalaciΓ³n β’ CaracterΓsticas β’ DocumentaciΓ³n β’ Agradecimientos DescripciΓ³n BucketLoot es un inspector automatizado de buckets compatibles con S3 que ayuda a los usuarios a extraer activos, seΓ±alar exposiciones de...
CVE-2024-9014
This post is a research article published by EQSTLab. CVE-2024-9014 β CVE-2024-9014 Sensitive Information Exposure PoC β Description CVE-2024-9014 : pgAdmin4 Sensitive Information Exposure description: pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication...
CVE-2025-68664
CVE-2025-68664 All I Want for Christmas Is Your Secrets: LangGrinch Strikes LangChain Core CVE-2025-68664 Author: Yarden Porat Cyata Research: LangGrinch Vulnerability in LangChain Published: https://cyata.ai/blog/langgrinch-langchain-core-cve-2025-68664/ Yesterday LangChain published a critical...
OpenChamber <1.13.0 - Unauthenticated Arbitrary File Read
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...
CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo
π OAuth Security Laboratory: CVE-2025-4679 Educational Simulator A safe, isolated environment to learn about OAuth vulnerabilities without risking real systems π Quick Start | π Learning Path | π‘οΈ Safe Environment | π₯ Contributors π Overview This educational laboratory simulates the CVE-2025-4679...
microsandbox: Secret values exposed in world-readable process arguments
Summary When the SDK spawns a sandbox, the msb sandbox child process receives the full network configuration as an inline --network-config command-line argument, and any per-sandbox environment as repeated --env KEY=VALUE arguments. On Linux a process's arguments are world-readable via...
langgrinch-cve-2025-68664-analysis
LangGrinch Vulnerability Analysis: CVE-2025-68664 Overview This repository contains a technical report analyzing CVE-2025-68664, also known as LangGrinch, a serialization injection vulnerability affecting LangChain Core. The report explains the vulnerability background, root cause, exploitation...
Checkmarx-CVE-2025-30066-Detection-Tool
Checkmarx-CVE-2025-30066-Detection-Tool These are tools for scanning your GitHub workflows and logs for potential malicious actions associated with CVE-2025-30066. It checks for a set of known risky GitHub Actions and a suspicious code snippet embedded in workflow files. As well for secrets that...
POC_CVE-2026-42880
CVE-2026-42880 β ArgoCD Secret Exposure via ServerSideDiff A lab environment for reproducing and detecting CVE-2026-42880 , a critical vulnerability in Argo CD where the ServerSideDiff gRPC handler exposes Kubernetes Secret data to read-only users. Vulnerability Overview...
SUSE SLES15 Security Update : nodejs18 (SUSE-SU-2026:4261-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4261-1 advisory. - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request bsc1236258...
boatcrash
boatcrash Exploit for CVE-2019-19030 that affects Harbor versions Use this script on Harbor instances running versions under 1.10.3 or 2.0.1 to enumerate all projects present in the platform. It can also be used to enumerate projects on higher versions but you will only be able to enumerate publi...
CVE-2026-61670 microsandbox: Secret values exposed in world-readable process arguments
microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments accepted by crates/cli/lib/sandboxcmd.rs...
GHSA-W72W-9QMJ-C9QM AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets
Summary The telemetry subsystem embeds a hardcoded auth token "secret" in the public source and transmits raw CLI argumentsβincluding --secret, --jwtsecret, and --httprpcsecret valuesβto a third-party telemetry endpoint. Details In telemetry/config.go line 12, var authToken = "secret" is committe...
AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets
Summary The telemetry subsystem embeds a hardcoded auth token "secret" in the public source and transmits raw CLI argumentsβincluding --secret, --jwtsecret, and --httprpcsecret valuesβto a third-party telemetry endpoint. Details In telemetry/config.go line 12, var authToken = "secret" is committe...
SUSE SLES12 Security Update : nodejs18 (SUSE-SU-2026:4248-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4248-1 advisory. - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request bsc1236258...
GHSA-XJW5-Q542-3VMR Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled
Summary system/config/security.yaml's default twigsandbox.configdeniedpaths list plugins, streams, security, backups, scheduler omits the system prefix. When an operator enables the documented, non-default twigcontent.configaccess: true setting intended to safely expose low-sensitivity values lik...
Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled
Summary system/config/security.yaml's default twigsandbox.configdeniedpaths list plugins, streams, security, backups, scheduler omits the system prefix. When an operator enables the documented, non-default twigcontent.configaccess: true setting intended to safely expose low-sensitivity values lik...
MongoDeepDive
π MongoDeepDive Context-Aware MongoDB Wire Protocol Exploit CVE-2025-14847 Advanced Heuristics Analyzer for Red Team Operations π Overview MongoDeepDive is a high-performance, asynchronous vulnerability scanner and forensic analyzer designed to detect uninitialized memory leaks in MongoDB servers...
CVE-2026-92917 Grav 2.0.0-rc.1 through 2.0.21 Configuration Disclosure via print_r
Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters printr, vardump, jsonencode, yamlencode, string: GravExtension::assertSandboxDumpSafe determines sandbox state by calling SandboxExtension::isSandboxed without...
CVE-2026-92591 Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installer
Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning that Craft is not installed, which makes anonymous installer actions β including install/validate-site β reachable on an installed production site whenever PHP remains available but the configured MySQL endpoint does...