127295 matches found
CVE-2026-86175 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs
NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...
CVE-2026-86175
NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses . Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, enabling unauthorized access to e...
EUVD-2026-71974
NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...
CVE-2026-86175 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs
NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...
akto v2.32.5
Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...
react2shell-checker
React2Shell Checker A security vulnerability scanner for detecting the React2Shell vulnerability CVE-2025-55182 in Next.js and React applications. Overview React2Shell Checker allows you to scan websites to detect if they are running vulnerable versions of Next.js or React Server Components. The...
CVE-2025-48384
Overview of CVE-2025-48384 CVE-2025-48384 is a critical vulnerability in Git, the widely used distributed version control system. It involves improper handling of carriage return CR characters in configuration values, which can lead to path traversal issues during submodule checkouts. This flaw...
CVE-2025-55182-Test-Server
CVE-2025-55182-Test-Server Play with react2shell in a safe environment! Quick Start Clone the repo root@kitploit: git clone https://github.com/CharlesTheGreat77/CVE-2025-55182-Test-Server cd CVE-2025-55182-Test-Server Run the docker file root@kitploit: docker compose up --build -d PoC...
CGA-QF59-9M5F-8H85
Bulletin has no description...
CGA-W4V3-W7VG-99V7
Bulletin has no description...
CGA-QWVC-MJGJ-RWQ6
Bulletin has no description...
CGA-G3HQ-5MH8-2M9R
Bulletin has no description...
CGA-76M4-JH45-JWFJ
Bulletin has no description...
CGA-5WVW-9GMX-8W3H
Bulletin has no description...
CGA-CQRR-W8J7-MM88
Bulletin has no description...
CGA-HW54-VHC3-974M
Bulletin has no description...
CVE-2026-75865
CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 针对 CVE-2026-75865 的概念验证与技术分析，该漏洞为 WordPress 插件 WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode（slug gdpr-cookie-consent）中一个未经验证的任意文件上传漏洞，可导致远程代码执行，影响所有版本直至并包括 4.4.1 。 关键信息| ---|--- CVE|...
CGA-QJQP-9JQ8-MQJH
Bulletin has no description...