70 matches found
FireStorePwn
FireStorePwn fsp Firestore Database Vulnerability Scanner Using APKs fsp scans an APK and checks the Firestore database for rules that are not secure, testing with or without authentication. If there are problems with the security rules, attackers could steal, modify or delete data and raise the...
MAL-2026-16533 Malicious code in exodus-firestore-synchronize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210b71fe2403143719408cea9a34626d7788c9aaa87b3f5a1276a92bd5578ce6 package.json declares a postinstall hook that auto-runs on npm install and executes whoami and hostname, then enumerates process.env for keys matchin...
Malicious code in exodus-firestore-synchronize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210b71fe2403143719408cea9a34626d7788c9aaa87b3f5a1276a92bd5578ce6 package.json declares a postinstall hook that auto-runs on npm install and executes whoami and hostname, then enumerates process.env for keys matchin...
CVE-2026-85167
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-85167 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
EUVD-2026-70402
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-85167
n8n versions before 2.35.4 and 2.36.x before 2.36.2 are affected by a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query nodes. The root cause is that these operations build their JSON query by interpolating expression values directly int...
CVE-2026-85167 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-85167 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-85167: Improper Neutralization of Special Elements in Data Query Logic
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
PT-2026-84999
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
Malicious Package
Overview firestore-lite is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in firestore-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...
MAL-2026-15534 Malicious code in firestore-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...
Firestore Rules Audit
Discovers Firestore projectId from Firebase config and probes common collections users, admin, orders… for unauthenticated REST read access. !/usr/bin/env python3 -- coding: utf-8 -- """Deep Firestore rules audit with collection enumeration.""" from kittysploit import from...
Firestore Public REST Access
Probe Cloud Firestore REST /v1/projects/project/databases/default/documents for anonymous list access. Project ID can be set explicitly or scraped from the target HTML/JS. !/usr/bin/env python3 -- coding: utf-8 -- """Detect unauthenticated Firestore REST document listing.""" import re from...
GCP Firestore Collections
List top-level Firestore collection IDs in the current GCP project !/usr/bin/env python3 -- coding: utf-8 -- import json from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Firestore Collections", "description": "List top-level Firesto...
GCP Firestore Documents Loot
List Firestore collections and read document payloads from the default database !/usr/bin/env python3 -- coding: utf-8 -- import json from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Firestore Documents Loot", "description": "List...
GCP Firestore Recursive Dump Loot
Recursively dump Firestore documents and nested subcollections from the default database !/usr/bin/env python3 -- coding: utf-8 -- import json from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Firestore Recursive Dump Loot",...
GCP Firebase Exposure
Analyze Firebase/Firestore exposure: apps, hosting, rules, remote config, and API keys !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Firebase Exposure", "description": "Analyze...