Lucene search
+L

62 matches found

Kitploit
Kitploit
•added 2026/10/04 4:43 a.m.•13 views

flask_appengine_redirector

flaskappengineredirector Google App Engine Flask C2 리디렉터 App Engine에서 실행할 준비가 된 간단한 Python Flask 예제 애플리케이션입니다. 개발 설정 SDK 설치: https://cloud.google.com/sdk/docs/ 개발 인스턴스 실행: devappserver.py app.yaml 배포 gcloud app create gcloud app deploy 설정 디버그 출력을 로그 콘센트로 설정 기본값: True: 전달 C2 도메인 설정 리디렉션 대상: 리디렉터 도...

6.2AI score
SaveExploits0
NVD
NVD
•added 2026/06/22 4:16 p.m.•40 views

CVE-2026-8934

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS0.0051EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/22 3:20 p.m.•10 views

CVE-2026-8934

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.9AI score0.0051EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/22 3:20 p.m.•13 views

CVE-2026-8934 Cross-Project Information Leakage in Google App Engine UI

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.8AI score0.0051EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/22 3:20 p.m.•46 views

CVE-2026-8934 Cross-Project Information Leakage in Google App Engine UI

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS0.0051EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/22 3:20 p.m.•27 views

EUVD-2026-38262

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.9AI score0.0051EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/22 3:20 p.m.•48 views

CVE-2026-8934

The CVE-2026-8934 describes a Missing Authorization vulnerability in a GraphQL private API operation within Google App Engine Cloud Console, enabling an unauthenticated attacker to leak sensitive App Engine request logs from other projects via a crafted request. Affected component: Google Cloud C...

6.9CVSS5.8AI score0.0051EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/22 12:00 a.m.•1 views

CVE-2026-8934: Missing Authorization

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.7AI score0.0051EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/22 12:00 a.m.•34 views

PT-2026-51347

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.9AI score0.0051EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/06 7:56 a.m.•11 views

CVE-2026-2331 CVE-2026-2331

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

9.8CVSS6.1AI score0.00901EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2011-4154

Malware in sbrugna...

7.2CVSS6.4AI score0.00233EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2011-4155

Malware in sbrugna...

7.2CVSS6.4AI score0.0024EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2011-4153

Malware in sbrugna...

7.2CVSS6.4AI score0.0022EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2011-1371

Malware in sbrugna...

6.8CVSS6.1AI score0.00495EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/06/07 12:00 a.m.•35 views

CVE-2024-55585

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword...

9CVSS0.00402EPSS
SaveExploits0References4
CVE
CVE
•added 2025/06/07 12:00 a.m.•123 views

CVE-2024-55585

CVE-2024-55585 affects moPS App up to version 1.8.618. The vulnerability stems from insufficient access control on administrative API endpoints, allowing unauthenticated users to perform read and write actions (example: /api/v1/users/resetpassword). The CVSS shows high impact with confidentialiti...

9CVSS6.6AI score0.00402EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/07/26 4:53 p.m.•16 views

Malicious code in google-appengine-ext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 142a8fbc789954291f2b01aab5ac1d139eaaf4f9f490fd6dcf30da438f7d8e51 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•14 views

Fedora: Security Advisory for golang-google-appengine (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/30 2:00 a.m.•20 views

[SECURITY] Fedora 36 Update: golang-google-appengine-1.6.7-6.fc36

This package supports the Go runtime on App Engine standard. It provides APIs for interacting with App Engine services...

7.3AI score
SaveExploits0
Fedora
Fedora
•added 2022/07/17 1:16 a.m.•38 views

[SECURITY] Fedora 35 Update: golang-google-appengine-1.6.7-5.fc35

This package supports the Go runtime on App Engine standard. It provides APIs for interacting with App Engine services...

9.3CVSS9AI score0.0995EPSS
SaveExploits4
Rows per page
Query Builder