Lucene search
+L

342 matches found

Kitploit
Kitploit
added 2026/09/03 1:33 a.m.5 views

HTB-Snapped-Writeup

HTB-Snapped-Writeup Writeup de la máquina HTB Snapped — Linux de dificultad Hard. CVE-2026-27944 divulgación de copia de seguridad no autenticada en Nginx UI encadenada con CVE-2026-3888 condición de carrera en snapd para escalada de privilegios local para lograr el compromiso total del sistema...

9.8CVSS7AI score0.22162EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/02 7:10 p.m.5 views

mantra

「🔑」 关于 Mantra 本工具使用 Go 编写,主要目标是搜索 JavaScript 文件和 HTML 页面中的 API 密钥。 它的工作原理是检查网页和脚本文件的源代码,查找与 API 密钥相同或相似的字符串。这些密钥通常用于对第三方 API 等在线服务进行身份验证,属于机密信息,不应公开共享。 通过使用此工具,开发者可以快速发现 API 密钥是否泄露,并在密钥被滥用前采取措施修复问题。此外,安全人员也可利用它来验证使用外部 API 的应用程序和网站是否对其密钥进行了充分保护。 总之,本工具是帮助保护 API 密钥、防止敏感信息泄露的高效且精准的解决方案。 帮助 使用 安装 通过...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:58 a.m.5 views

CVE-2025-11203-PoC

CVE-2025-11203 — LiteLLM Health Endpoint APIKEY Information Disclosure LiteLLM versions 1.63.14 的 /health 端点在处理 apikey 参数时, 未正确过滤敏感信息 ,导致已认证用户可获取其他模型配置中存储的 API Key。 本应通过 cleanendpointdata 函数移除的 apikey 字段在某些代码路径中被泄露。 Field| Value ---|--- CVE| CVE-2025-11203 ZDI ID| ZDI-25-929 ZDI-CAN-26585 CVSS...

3.5CVSS5.9AI score0.00416EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/28 6:04 p.m.2 views

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – Canale laterale sulla lunghezza del testo cifrato di Kyber Codice del programma Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a...

5.5CVSS5.5AI score0.0019EPSS
SaveExploits0
OSV
OSV
added 2026/08/26 3:44 p.m.10 views

CVE-2026-81027 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...

8.4CVSS5.7AI score
SaveExploits0References6
NVD
NVD
added 2026/08/18 4:18 p.m.6 views

CVE-2026-75915

CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the jsexecution tool that fails to scrub parent process environment variables before spawning Node.js. Attackers can craft malicious JavaScript code executed by the tool to read process.env and leak API key...

8.7CVSS0.00504EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/17 7:31 p.m.18 views

CVE-2026-57485

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.9.0, the /api/v1/pipeline/handleData endpoint in app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java injects the STIRLING-PDF-BACKEND-API-USER API...

8.5CVSS5.3AI score0.00256EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/08/17 11:04 a.m.30 views

CVE-2026-74900

openssl_encrypt before version 1.4.0 has a flaw in pqc.py: when KEM decapsulation fails, it silently falls back to simulation mode, deriving a deterministic shared secret from just 16 bytes of the private key plus public encapsulated key data. An attacker with those 16 private-key bytes can compu...

9.8CVSS5.4AI score0.00337EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/13 7:14 p.m.7 views

CVE-2026-72632

Observable Discrepancy CWE-203 in Kibana Fleet can lead to information disclosure via Excavation CAPEC-116. Fleet removes the Elasticsearch API key value of an enrolled Elastic Agent from the responses of its agent listing capability, but that capability accepted caller-supplied filter expression...

7.1CVSS5.3AI score0.00247EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/12 2:30 p.m.72 views

CVE-2026-73264

Prowler (cloud security platform) contains an SSRF risk prior to version 5.33.1. An authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compatible provider via POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/...

7.6CVSS5.4AI score0.00319EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/08/11 5:41 p.m.9 views

bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy ...

9.9CVSS7.2AI score0.00899EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/10 8:00 a.m.41 views

CVE-2026-66407

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered...

8.1CVSS0.00184EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 12:32 p.m.19 views

Malicious code in uniswap-sdk-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d01efda86c7ce792f8396d425dce51600262660989f438dd13a17068d9df6d The package presents itself as a Uniswap V4 SDK but its WalletClient constructor captures the caller-supplied private key and POSTs it, along with th...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/08/04 2:30 p.m.28 views

CVE-2026-67618 marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata

marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious baseurl in PEP-723 inline script metadata, which is merged into session configuration with higher precedence than the operator's own setting...

7.1CVSS5.4AI score
SaveExploits0References7
Snyk
Snyk
added 2026/08/03 3:51 a.m.12 views

Improper Input Validation

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the...

9.3CVSS5.5AI score0.00269EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.9 views

Improper Input Validation

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power...

9.3CVSS5.5AI score0.00269EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.11 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power of the local static private key x without any range or subgroup-membership check, while...

9.3CVSS5.5AI score0.00269EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/28 9:49 a.m.14 views

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the ML-KEM Poly.toMsg, Poly.compressPoly, and PolyVec.compressPolyVec routines. An attacker can recover a long-term private key by sending ciphertexts and measuring the time taken by repeated decapsulation operations th...

8.2CVSS5.7AI score0.00345EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/07/28 9:49 a.m.13 views

Timing Attack

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Timing Attack in the ML-KEM Poly.toMsg, Poly.compressPoly, and PolyVec.compressPolyVec routines. An attacker can recover a long-term private key by...

8.2CVSS5.7AI score0.00345EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/07/28 9:49 a.m.12 views

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the ML-KEM Poly.toMsg, Poly.compressPoly, and PolyVec.compressPolyVec routines. An attacker can recover a long-term private key by sending ciphertexts and measuring the time taken by repeated decapsulation operations th...

8.2CVSS5.7AI score0.00345EPSS
SaveExploits1References2
Rows per page
Query Builder