Lucene search
+L

10205 matches found

Kitploit
Kitploit
•added 2022/07/24 12:30 p.m.•901 views

Doenerium - Fully Undetected Grabber (Grabs Wallets, Passwords, Cookies, Modifies Discord Client Etc.)

Fully Undetected Grabber Grabs Wallets, Passwords, Cookies, Modifies Discord Client Etc. Features Stealer Discord Token Discord Info - Username, Phone number, Email, Billing, Nitro Status & Backup Codes Discord Friends with rare badges Grabs crypto wallets Zcash Armory Bytecoin Jaxx Exodus Ethere...

7.5AI score
SaveExploits0References1
RustSec
RustSec
•added 2022/07/22 12:00 p.m.•32 views

Slack OAuth Secrets leak in debug logs

Debug log formatting made it possible to leak OAuth secrets into debug logs. The patched version has introduced more strict checks to avoid this...

7.5CVSS2.9AI score0.00891EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2022/07/22 12:00 p.m.•48 views

RUSTSEC-2022-0086 Slack OAuth Secrets leak in debug logs

Debug log formatting made it possible to leak OAuth secrets into debug logs. The patched version has introduced more strict checks to avoid this...

7.5CVSS7.3AI score0.00891EPSS
SaveExploits0References3
OSV
OSV
•added 2022/07/22 11:05 a.m.•12 views

OESA-2022-1773 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2020-24489 Domain-bypass transient execution vulnerability in so...

8.8CVSS6.7AI score0.00472EPSS
SaveExploits0References4
NVD
NVD
•added 2022/07/22 4:15 a.m.•62 views

CVE-2022-31162

Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret types to reduce the possibility of printing sensitive...

7.5CVSS0.00891EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/22 12:00 a.m.•22 views

Slack Morphism 安全漏洞

Slack Morphism is a modern asynchronous client library for Rust with support for Slack Web/Events API/Socket Mode and Block Kit. An information disclosure vulnerability exists in Slack Morphism versions prior to 0.41.0, which stems from the potential disclosure of Slack OAuth client information i...

7.5CVSS5.6AI score0.00891EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/07/21 1:20 p.m.•72 views

CVE-2022-31162 Slack Morphism for Rust before 0.41.0 can accidentally leak Slack OAuth client information in application debug logs

Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret types to reduce the possibility of printing sensitive...

7.5CVSS7.5AI score0.00891EPSS
SaveExploits0References2
CVE
CVE
•added 2022/07/21 1:20 p.m.•469 views

CVE-2022-31162

CVE-2022-31162 affects Slack Morphism (Rust) prior to 0.41.0. The root issue was overly verbose debug formatting that could cause Slack OAuth client information to leak into application logs. Exploitation guidance is not provided in the documents; however, various sources confirm an information d...

7.5CVSS7.2AI score0.00891EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/21 12:00 a.m.•2 views

CVE-2022-31162: Exposure of Sensitive System Information Due to Uncleared Debug Information

Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret types to reduce the possibility of printing sensitive...

7.5CVSS7AI score0.00891EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/07/21 12:00 a.m.•9 views

Fedora: Security Advisory for golang-github-google-dap (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/07/21 12:00 a.m.•14 views

Fedora: Security Advisory for android-tools (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OSV
OSV
•added 2022/07/20 1:15 p.m.•13 views

CVE-2022-24660

The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext...

7.5CVSS5.8AI score0.00641EPSS
SaveExploits1References2
NVD
NVD
•added 2022/07/20 1:15 p.m.•18 views

CVE-2022-24660

The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext...

7.5CVSS0.00641EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/07/20 1:15 p.m.•18 views

CVE-2022-24660

The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext...

7.5CVSS7.1AI score0.00641EPSS
SaveExploits1References3
Prion
Prion
•added 2022/07/20 1:15 p.m.•25 views

Information disclosure

The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext...

5CVSS7.4AI score0.00641EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/07/20 12:31 p.m.•90 views

CVE-2022-24660

CVE-2022-24660 affects Goldshell ASIC Miners (v2.2.1 and earlier). The root cause is a debug interface exposed publicly via the web interface, enabling attackers to access passwords and other sensitive information in plaintext. The CVE entry notes network attack potential with high impact to conf...

7.5CVSS7.4AI score0.00641EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/07/20 12:31 p.m.•31 views

CVE-2022-24660

The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext...

7.7AI score0.00641EPSS
SaveExploits1References2
Fedora
Fedora
•added 2022/07/20 1:40 a.m.•31 views

[SECURITY] Fedora 35 Update: golang-github-google-dap-0.4.0-3.fc35

Go implementation of the Debug Adapter Protocol...

2AI score
SaveExploits0
Fedora
Fedora
•added 2022/07/20 1:40 a.m.•18 views

[SECURITY] Fedora 35 Update: android-tools-31.0.2-2.fc35

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

0.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/07/20 1:30 a.m.•49 views

Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs

Impact Potential/accidental leaking of Slack OAuth client information in application debug logs. Patches More strict and secure debug formatting was introduced in v0.41 for OAuth secret types to avoid the possibility of printing sensitive information in application logs. Workarounds Don't...

7.5CVSS7.2AI score0.00891EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder