95 matches found
CVE-2023-25570 Apollo has potential access control security issue in eureka
Apollo is a configuration management system. Prior to version 2.1.0, there are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no authentication feature enabled for the built-in eureka service. Malicious hackers ma...
CVE-2023-25570
Apollo is a configuration management system. Prior to version 2.1.0, there are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no authentication feature enabled for the built-in eureka service. Malicious hackers ma...
CVE-2023-25570
Affected product; Apollo (configuration management). Prior to version 2.1.0, exposing apollo-configservice to the internet could allow attackers to access the built‑in eureka service due to lack of login authentication, enabling potential impersonation of apollo-configservice and apollo-adminserv...
PT-2023-20169 · Apollo · Apollo
Name of the Vulnerable Software and Affected Versions: Apollo versions prior to 2.1.0 Description: Apollo is a configuration management system. There are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no...
Apollo 访问控制错误漏洞
Apollo is a set of PHP scripts by Alex Breen, an individual developer. It is intended to provide a web-based interface for students to upload coursework. A security vulnerability exists in Apollo versions prior to 2.1.0 that stems from not enabling authentication for the built-in eureka service,...
eurekaforbes.com Cross Site Scripting vulnerability OBB-3115885
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cn.home1:spring-cloud-eureka-server (>=0.0.1 <=1.0.1.U1), com.github.springcloud:moss-client-1.x (=1.0.1.RELEASE) +162 more potentially affected by CVE-2018-1000129 via org.jolokia:jolokia-core (>=1.3.7 <=1.4.0)
org.jolokia:jolokia-core MAVEN version =1.3.7, =0.0.1, =1.2.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =0.1.5, =0.1.5, =2.0-beta-1, =2.3.0, =2.7.1 and more Source cves: CVE-2018-1000129 Source advisory: OSV:GHSA-HFPG-GQJW-779M...
network.eureka.education Cross Site Scripting vulnerability OBB-2166677
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SpringBootVulExploit
This repository is an offensive tool for Spring Boot exploitation. It contains various modules and scripts that can be used to exploit vulnerabilities in Spring Boot applications. The primary vulnerability being targeted is a deserialization vulnerability in the Spring Boot framework, which can b...
ci.eureka.ca.gov Cross Site Scripting vulnerability OBB-2157597
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SpringBootVulExploit
It is an offensive tool for Spring Boot exploitation. The repository contains a collection of exploits and techniques for exploiting Spring Boot applications, including: Spring Boot Vulnerability Exploit Check List: a checklist for identifying vulnerabilities in Spring Boot applications...
com.github.fmcejudo:quarkus-eureka (>=0.0.1 <=0.0.13), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1 <=0.0.13) +45 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=4.0.0.Beta4 <=4.5.6.Final)
org.jboss.resteasy:resteasy-client-microprofile MAVEN version =4.0.0.Beta4, =0.0.1, =0.0.1, =0.0.1, =1.0.2.Final, =1.1.0.Final, =1.1.0.Final, =1.0.2.Final, =1.2.0.Final, =0.1.0, =0.0.1, =0.0.1, =1.0.0, =1.1.0 - io.github.project-openubl:xml-sender-api =1.0.0.Beta2 -...
com.github.adrmal:peka-vm-client (=1.0.0), com.github.fmcejudo:quarkus-eureka (>=0.0.1 <=0.0.5) +269 more potentially affected by CVE-2021-20289 via org.jboss.resteasy:resteasy-core (>=4.0.0.Beta6 <=4.5.0.Final)
org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.Beta6, =0.0.1, =0.0.1, =5.6.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.7.4 and more Source cves: CVE-2021-20289 Source advisory: OSV:GHSA-244R-FCJ3-GHJQ...
SpringBootVulExploit
This repository contains a collection of Spring Boot vulnerability exploits and research materials. The repository includes various projects, each targeting a specific vulnerability in Spring Boot applications. The vulnerabilities include: 1. JNDI Object deserialization RCE Remote Code Execution ...
eureka-emsdetten.de Cross Site Scripting vulnerability OBB-1349135
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SpringBootVulExploit
This repository contains a collection of Spring Boot vulnerability exploitation tools and techniques. The tools are designed to exploit various vulnerabilities in Spring Boot applications, including remote code execution RCE, privilege escalation, and data exfiltration. The repository includes...
Spring Cloud eureka suffers from an information disclosure vulnerability
Spring Cloud is currently used for the development of microservices, one of the mainstream frameworks, in Spring Cloud you can use the Eureka module to realize the service registration and discovery, Spring Cloud Eureka is based on Netflix Eureka to do the second package, which is mainly...
eureka-billard.nl XSS vulnerability
Open Bug Bounty ID: OBB-652492 Description| Value ---|--- Affected Website:| eureka-billard.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Grab: Unrestricted access to https://██████.█████myteksi.net/
Hello again Grab Security Team ! Following my previous research, it seems that your Microservices architecture you are currently running on .█████myteksi.net is publicly exposed on another endpoint : https://█████████.█████myteksi.net. Summary: When researching and starting a new enumeration of...
Grab: Unrestricted access to Eureka server on ██████
Hi Grab Security Team, First of all, best wishes for 2018, empty of bugs if possible ;- Summary: I found that the following endpoint is hosting Netflix Eureka Server █████ and that even if some URLs are requiring authentication 401 code for some of thems like /metrics for example, it is still...