Lucene search
+L

1326 matches found

Kitploit
Kitploit
added 2018/01/27 9:0 p.m.18 views

Twebit - Bitcoin Analysis in Twitter With Machine Learning

Bitcoin analysis with machine learning. How it works? 1- Get tweets from twitter. 2- Filter tweets. 3- Tweet classification with naive bayes algorithm Positive,negative and neut. Installation git clone https://github.com/omergunal/twebit cd twebit pip3 install -r requirements.txt Update your api...

7.2AI score
Exploits0References1
Kitploit
Kitploit
added 2018/01/05 9:4 p.m.239 views

Reposcanner - Python Script To Scan Git Repos For Interesting Strings

Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspires by truffleHog. Installation The python Git module is required python-git on Debian. Usage ./reposcanner -r Options: optional arguments: -h, --help sho...

7.2AI score
Exploits0References2
Veracode
Veracode
added 2018/01/05 8:30 a.m.10 views

Unauthorized API Access

solidus is vulnerable to unauthorized API access attacks. The vulnerability exists as API keys were not validated for critical endpoints such as the Api::Orderscreate endpoint...

6.8AI score
Exploits0
Github Security Blog
Github Security Blog
added 2017/12/06 4:43 p.m.36 views

Recurly gem Server-Side Request Forgery in Resource#find method

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the Resourcefind method that could result in compromise of API keys or other critical resources...

9.8CVSS8.9AI score0.02594EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2017/12/06 4:43 p.m.16 views

GHSA-X27V-X225-GQ8G Recurly gem Server-Side Request Forgery in Resource#find method

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the Resourcefind method that could result in compromise of API keys or other critical resources...

9.8CVSS9.4AI score0.02594EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2017/11/21 11:22 a.m.23 views

CVE-2017-1000401

The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, , supports form validation e.g. for API keys. The form validation AJAX requests were sent via GET, which could result in secrets being logged to a HTTP access log in non-default configurations o...

2.2CVSS0.8AI score0.00391EPSS
Exploits0References2
Veracode
Veracode
added 2017/11/14 9:30 a.m.19 views

Server-side Request Forgery (SSRF)

The Python Recurly client is vulnerable to server-side request forgery SSRF attacks A malicious user can pass a URI from a different domain to gain access to API keys or other sensitive information...

9.8CVSS9.4AI score0.02594EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2017/11/14 8:45 a.m.14 views

Server-Side Request Forgery (SSRF)

recurly is vulnerable to server-side request forgery SSRF attacks A malicious user can pass a URI from a different domain to gain access to API keys or other sensitive information...

9.8CVSS9.4AI score0.02594EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2017/11/14 12:0 a.m.4 views

Recurly Client Ruby Library Server-Side Request Forgery Vulnerability

Recurly Client Ruby Library is a Ruby API wrapper for Recurly from Recurly USA. A server-side request forgery vulnerability exists in the Resourcefind method in the Recurly Client Ruby Library. An attacker could use this vulnerability to take control of API keys or other important resources...

9.8CVSS7AI score0.02594EPSS
Exploits0References1
NVD
NVD
added 2017/11/13 5:29 p.m.31 views

CVE-2017-0906

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources...

9.8CVSS9.4AI score0.02594EPSS
Exploits0References3
NVD
NVD
added 2017/11/13 5:29 p.m.18 views

CVE-2017-0907

The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources...

9.8CVSS9.4AI score0.02594EPSS
Exploits0References3
Prion
Prion
added 2017/11/13 5:29 p.m.14 views

Server side request forgery (ssrf)

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resourcefind" method that could result in compromise of API keys or other critical resources...

7.5CVSS9.4AI score0.02594EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2017/11/13 5:29 p.m.16 views

Server side request forgery (ssrf)

The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources...

7.5CVSS9.4AI score0.02594EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2017/11/13 5:29 p.m.14 views

Server side request forgery (ssrf)

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources...

7.5CVSS9.4AI score0.02594EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2017/11/13 5:29 p.m.21 views

CVE-2017-0905

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resourcefind" method that could result in compromise of API keys or other critical resources...

9.8CVSS9.4AI score0.02594EPSS
Exploits0References3
OSV
OSV
added 2017/11/13 5:29 p.m.27 views

PYSEC-2017-68

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources...

9.8CVSS4AI score0.02594EPSS
Exploits0References4
OSV
OSV
added 2017/11/13 5:29 p.m.20 views

CVE-2017-0906

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources...

9.8CVSS9.4AI score
Exploits0References3
OSV
OSV
added 2017/11/13 5:29 p.m.19 views

CVE-2017-0905

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resourcefind" method that could result in compromise of API keys or other critical resources...

9.8CVSS6.8AI score
Exploits0References3
OSV
OSV
added 2017/11/13 5:29 p.m.15 views

CVE-2017-0907

The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources...

9.8CVSS6.8AI score
Exploits0References3
CVE
CVE
added 2017/11/13 5:0 p.m.97 views

CVE-2017-0905

The CVE-2017-0905 issue affects the Recurly Client Ruby Library (before versions 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3). A Server-Side Request Forgery vulnerability exists in the Resource#find method that could lead to compromise of API keys or o...

9.8CVSS9.4AI score0.02594EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder