Lucene search
+L

53 matches found

Kitploit
Kitploit
•added 2026/10/04 4:43 a.m.•13 views

flask_appengine_redirector

flaskappengineredirector Google App Engine Flask C2 redirector A simple Python Flask example application that's ready to run on App Engine. Development Setup Install SDK: https://cloud.google.com/sdk/docs/ Run dev instance: devappserver.py app.yaml Deploy gcloud app create gcloud app deploy Setup...

6.3AI score
SaveExploits0
NVD
NVD
•added 2026/06/22 4:16 p.m.•40 views

CVE-2026-8934

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS0.0051EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/22 3:20 p.m.•10 views

CVE-2026-8934

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.9AI score0.0051EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/22 3:20 p.m.•13 views

CVE-2026-8934 Cross-Project Information Leakage in Google App Engine UI

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.8AI score0.0051EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/22 3:20 p.m.•46 views

CVE-2026-8934 Cross-Project Information Leakage in Google App Engine UI

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS0.0051EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/22 12:00 a.m.•34 views

PT-2026-51347

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.9AI score0.0051EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/22 12:00 a.m.•1 views

CVE-2026-8934: Missing Authorization

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched ...

6.9CVSS5.7AI score0.0051EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2011-4154

Malware in sbrugna...

7.2CVSS6.4AI score0.00233EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2011-4155

Malware in sbrugna...

7.2CVSS6.4AI score0.0024EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2011-4153

Malware in sbrugna...

7.2CVSS6.4AI score0.0022EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2011-1371

Malware in sbrugna...

6.8CVSS6.1AI score0.00495EPSS
SaveExploits1References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/07/26 4:53 p.m.•16 views

Malicious code in google-appengine-ext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 142a8fbc789954291f2b01aab5ac1d139eaaf4f9f490fd6dcf30da438f7d8e51 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.3AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2021/03/18 9:05 a.m.•16 views

Google Reveals What Personal Data Chrome and Its Apps Collect On You

Privacy-focused search engine DuckDuckGo called out rival Google for "spying" on users after the search giant updated its flagship app to spell out the exact kinds of information it collects for personalization and marketing purposes. "After months of stalling, Google finally revealed how much...

5.8AI score
SaveExploits0
HackRead
HackRead
•added 2019/01/26 6:58 p.m.•171 views

Hackers abusing Google App Engine to spread PDF malware

By Waqas The Cobalt Strike advanced persistent threat APT group is using Google App Engine to spread PDF malware against financial firms. The IT security researchers at Netskope have discovered a sophisticated malware campaign in which cybercriminals are abusing Google App Engine GCP, a web...

1.5AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2018/11/28 2:05 p.m.•12 views

The Nature of Mass Exploitation Campaigns

We’ve all seen the movies where there’s a dark hooded figure sitting behind a keyboard entering a 3D virtualized representation of the internet. Focusing in on their target, the figure sees various bits of information about that person, from their birth date, to headshot of them stepping out of a...

0.1AI score
SaveExploits0References5
Talos Blog
Talos Blog
•added 2018/10/29 8:30 a.m.•28 views

GPlayed's younger brother is a banker — and it's after Russian banks

This blog post is authored by Vitor Ventura. Introduction Cisco Talos published its findings on a new Android trojan known as "GPlayed" on Oct. 11. At the time, we wrote that the trojan seemed to be in the testing stages of development, based on the malware's code patterns, strings and telemetry...

SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
•added 2018/08/16 8:13 p.m.•71 views

AV-Comparatives: Trend Micro Mobile Security for Android Provides 100% Malware Protection for Mobile Users

With the introduction of Android v8.0 Android Oreo in August of 2017, among other OS improvements Google introduced its built-in malware protection for Android call Play Protect dependent on Google Play Services 11 or later. Play Protect checks apps and APK files downloaded from Google Play or...

1.6AI score
SaveExploits0
myhack58
myhack58
•added 2018/05/28 12:00 a.m.•32 views

See how do I find the value of 3 thousand 6 thousand USD Google RCE vulnerability-vulnerability warning-the black bar safety net

! This article tells the story of the Uruguayan public University, 18-year-old student Ezequiel Pereira found Google highest level RCE vulnerability-related process. In the beginning of the year, Ezequiel found Google Google App Engine GAEis a non-production environment of a vulnerability, exploi...

8.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/05/16 4:17 p.m.•25 views

appengine.google.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-617281 Description| Value ---|--- Affected Website:| appengine.google.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

SaveExploits0
myhack58
myhack58
•added 2017/05/11 12:00 a.m.•39 views

Google said in the release“of the Android O”the new version will not fix the screen hijacking vulnerability-vulnerability warning-the black bar safety net

Millions of Android smartphones are suffering from a serious“screen hijacking”vulnerabilities, a hacker could steal user passwords, Bank details and help ransomware app to steal money. Google is claiming that publishing the“Android O”version does not fix the vulnerability The worst thing is that...

0.2AI score
SaveExploits0
Rows per page
Query Builder