290 matches found
PT-2026-76573
Name of the Vulnerable Software and Affected Versions Etherpad versions 2.1.0 through 3.0.0 Description Etherpad fails to properly sanitize the x-proxy-path request header, leading to two distinct issues when client-supplied headers reach the server. First, in src/node/hooks/express/admin.ts, the...
PT-2026-76006
Etherpad's device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token in the GET response body Description Etherpad ships an endpoint pair under /tokenTransfer src/node/hooks/express/tokenTransfer.ts that lets a logged-in user move their...
PT-2026-76574
Name of the Vulnerable Software and Affected Versions Etherpad versions 2.6.0 through 3.0.0 Description An issue exists in the device-to-device author-token transfer mechanism. The system uses the POST /tokenTransfer endpoint to store an author token and exposes it via the GET /tokenTransfer/uuid...
PT-2026-76572
Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.1.0 Description Files src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts generate temporary filenames using Math.random, which is not cryptographically secure and predictable across calls withi...
Unauthenticated Etherpad Detection
Finds Etherpad instances that allow adding new notes without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Finds Etherpad instances that allow adding new notes without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...
Etherpad Lite <1.6.4 - Admin Authentication Bypass Detection
Etherpad Lite before 1.6.4 is exploitable for admin access. !/usr/bin/env python3 -- coding: utf-8 -- """Etherpad Lite before 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Etherpad Lite 1.6.4 - Admin...
EUVD-2020-15538
Malware in sbrugna...
EUVD-2020-15539
Malware in sbrugna...
EUVD-2015-3355
Malware in sbrugna...
EUVD-2013-7147
Malware in sbrugna...
EUVD-2019-8010
Malware in sbrugna...
EUVD-2021-21464
Malware in sbrugna...
EUVD-2018-18581
Malware in sbrugna...
EUVD-2018-20921
Malware in sbrugna...
EUVD-2021-21463
Malware in sbrugna...
EUVD-2020-15542
Malware in sbrugna...
EUVD-2015-4110
Malware in sbrugna...
EUVD-2015-3343
Malware in sbrugna...