ExifSmugglingPoC

Exif Smuggling A Proof-of-Concept evolution of Cache Smuggling. This attack conceals an executable payload inside a JPG's Exif data. As a result, image caching such as that of a Web Browser can be used to passively download the payload. As a result, the example loader chromepoc.ps1 does not need ...

LAB-DFIR-cve-2023-38831

LAB-DFIR-cve-2023-38831 This lab simulates a CVE-2023–38831 attack and must investigate diskimage and contains a variety of questions including understanding the Windows registry, NTFS files, cache browser, and a complete understanding of the functions that come out of Windows in the sequence of...

CVE-2026-118571

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3...

CVE-2026-118550

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-114548

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2...

CVE-2026-114546

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2...

CVE-2026-114542

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth OAuth2 & OpenID Connect versions: from 6.1.0 to 6.1.3...

CVE-2026-114542 Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth OAuth2 & OpenID Connect versions: from 6.1.0 to 6.1.3...

CVE-2026-114542

The Drupal Simple OAuth (OAuth2) & OpenID Connect module (versions 6.1.0 to 6.1.3 ) contains a vulnerability where it caches a token's permissions in a way that allows them to be reused for another user's token sharing the same scopes. This could lead to an access bypass , potentially granting a ...

CVE-2026-114542 Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth OAuth2 & OpenID Connect versions: from 6.1.0 to 6.1.3...

CVE-2026-114542

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth OAuth2 & OpenID Connect versions: from 6.1.0 to 6.1.3...

EUVD-2026-113530

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth OAuth2 & OpenID Connect versions: from 6.1.0 to 6.1.3...

CVE-2026-114546

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2...

CVE-2026-114546

The Drupal Media Alias Display module versions 0.0.0 to 2.1.2 and 3.0.0 to 3.0.2 are vulnerable to an information disclosure flaw (CWE-525 ). The root cause is that certain files may be served with a Cache-Control: public header despite being uncacheable. This allows unauthorized users to access ...

CVE-2026-114546 Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2...

CVE-2026-114546 Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2...

EUVD-2026-113527

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2...

CVE-2026-114548

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2...

CVE-2026-114548 ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2...

CVE-2026-114548

The Drupal ImageAPI Optimize WebP module (versions 0.0.0 to 2.1.2 ) is vulnerable to information disclosure due to the use of web browser caches containing sensitive information . The module overrides Drupal core's image style download controller and serves WebP derivatives with a Cache-Control: ...