290 matches found
PT-2026-76006
Etherpad's device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token in the GET response body Description Etherpad ships an endpoint pair under /tokenTransfer src/node/hooks/express/tokenTransfer.ts that lets a logged-in user move their...
PT-2026-75963
GHSA-03 — x-proxy-path header reflected into admin HTML/JS/CSS cache-poisoning XSS and concatenated into redirect open-redirect Severity: Medium CVSS v3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS suggested base score: 6.1 — Medium Re-validate in the first.gov calculator before...
PT-2026-76574
Name of the Vulnerable Software and Affected Versions Etherpad versions 2.6.0 through 3.0.0 Description An issue exists in the device-to-device author-token transfer mechanism. The system uses the POST /tokenTransfer endpoint to store an author token and exposes it via the GET /tokenTransfer/uuid...
PT-2026-76572
Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.1.0 Description Files src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts generate temporary filenames using Math.random, which is not cryptographically secure and predictable across calls withi...
Unauthenticated Etherpad Detection
Finds Etherpad instances that allow adding new notes without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Finds Etherpad instances that allow adding new notes without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...
Etherpad Lite <1.6.4 - Admin Authentication Bypass Detection
Etherpad Lite before 1.6.4 is exploitable for admin access. !/usr/bin/env python3 -- coding: utf-8 -- """Etherpad Lite before 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Etherpad Lite 1.6.4 - Admin...
EUVD-2020-15538
Malware in sbrugna...
EUVD-2020-15539
Malware in sbrugna...
EUVD-2015-3355
Malware in sbrugna...
EUVD-2013-7147
Malware in sbrugna...
EUVD-2021-21463
Malware in sbrugna...
EUVD-2019-8010
Malware in sbrugna...
EUVD-2020-15541
Malware in sbrugna...
EUVD-2021-21464
Malware in sbrugna...
EUVD-2018-18581
Malware in sbrugna...
EUVD-2018-20921
Malware in sbrugna...
EUVD-2020-15542
Malware in sbrugna...
EUVD-2015-4110
Malware in sbrugna...