iCULeak.py

iCULeak.py 用于在 Cisco CUCM Call Manager 管理的环境中查找并提取电话配置文件中的凭据的工具。 使用 Cisco CUCM Call Manager 时，电话配置文件存储在 TFTP 服务器上。这些 VoIP 电话配置文件经常包含敏感数据，包括电话 SSH/管理员凭据。 此外，还存在一个与某些浏览器行为相关的问题：如果管理员在浏览器中保存了其 CUCM 凭据（通常是 AD 凭据），浏览器会自动填写 SSH 用户名和密码字段 。使用自动填充凭据的密码管理器的管理员也遇到了类似问题，他们发现自己的凭据被自动填入 SSH...

claudleak

claudleak 扫描公共GitHub仓库中AI编码工具配置文件（.claude/、.cursor/、.continue/、.codex/、CLAUDE.md、AGENTS.md等）中的泄露凭证。 使用TruffleHog进行秘密检测。 示例.claude/目录： "permissions": "allow": "Bashgo build:", "BashRAPID7ENCRYPTEDCREDS='eP3g488hQ23QiU4kJahhwPKs3PyE' go test ./pkg/agents/ -run TestRules -v -count=1 -timeout 30s",...

CVE-H3C-Report

H3C GR系列路由器系统管理存在未授权访问漏洞 产品 : GR系列路由器 版本 : 全部 风险等级 : 高危 网站 : http://www.h3c.com/ 危害 : 攻击者可利用此漏洞，通过构造特殊请求包绕过身份验证，获取路由器敏感信息。 原理 : 路由器未对目录及相关文件进行访问认证 漏洞利用代码 : 注意：需修改POC中的文件名后缀，例如GR8300.cfg GET /userLogin.asp/../actionpolicystatus/../GR1100-P.cfg HTTP/1.1 Host: 59.35.220.76:8989 Sec-Fetch-Mode:...

XWiki Platform - Information Disclosure

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. id: CVE-2025-55747 info: name: XWiki Platform - Information Disclosure author: Redmomn...

[SECURITY] Fedora 43 Update: python-configargparse-1.7.7-1.fc43

A drop-in replacement for argparse that allows options to also be set via config files and/or environment variables. Applications with more than a handful of user-settable options are best configured through a combination of command line args, config files, hard-cod ed defaults, and in some cases...

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

CVE-2026-90937 froxlor before 2.2.5 nginx/Apache Configuration Injection via subdomain redirect URL

froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing authenticated customers to inject arbitrary nginx or Apache configuration directives. Attackers can supply URLs containing literal newlines that are written verbatim into vhost config files duri...

CVE-2026-78043

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

CVE-2026-75168

An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to write arbitrary content to files within /uxx/config/ and /ugw/config/...

CVE-2026-85668

Xinference (v3.x, affected commit 4a94832, specifically v3.3.0) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/auto-register endpoint. The endpoint accepts a caller-supplied model_path parameter without authentication or path confinement, reads and p...

PT-2026-85683

An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6 00 05 allows a remote authenticated user with the low-privileged Standard role to write arbitrary content to files within /uxx/config/ and /ugw/config/...

CVE-2026-9186: Improper Access Control

IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoofing X-Forwarded-For: 127.0.0.1 header, enabling arbitrary writes to IDE config files /.cursor/mcp.json, etc...

CVE-2026-84202

A flaw was found in ModelScope. This vulnerability arises from the use of PyYAML's unsafe yaml.Loader when parsing model configuration files. A remote attacker can exploit this by crafting malicious model repositories containing poisoned configuration files. When these files are loaded by a user,...

PT-2026-84300

Name of the Vulnerable Software and Affected Versions ModelScope versions prior to 1.40.1 Description ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files. This allows arbitrary code execution through Python object construction tags, enabling attackers to craft malicious...

PT-2026-80400

Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM in github.com/pterodactyl/wings...

Malicious code in move-bcs-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00077e83bd841dae96e61d432da796cf21839a32e5caf03e7256b2573225335 [email protected] declares a postinstall hook package.json line 7: "postinstall": "node install.js" that runs install.js on npm install. install.j...

CVE-2026-47763

A flaw was found in pdm, a Python package and dependency manager. This vulnerability allows a local attacker to overwrite arbitrary files on the system. By crafting a malicious repository with symlinks for project-local configuration files, a local user performing pdm operations could inadvertent...

MAL-2026-11994 Malicious code in @zzzgenesis00/web3-provider-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae571005ccdcdc23e50fbee1eddc31d39355706b7945df3ccbb3096ecaf724b Package impersonates MetaMask's web3-provider-engine author field 'MetaMask', homepage pointing to github.com/MetaMask/web3-provider-engine while...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...