Lucene search
+L

342 matches found

Kitploit
Kitploit
added 2026/09/03 1:33 a.m.5 views

HTB-Snapped-Writeup

HTB-Snapped-Writeup HTB Snapped — Hard Linux machine writeup. CVE-2026-27944 Nginx UI unauthenticated backup disclosure chained with CVE-2026-3888 snapd race condition LPE to achieve full system compromise. HTB: Snapped — Writeup Difficulty: Hard OS: Linux Ubuntu 24.04 Release Date: 23 Mar 2026...

9.8CVSS7AI score0.22162EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/02 7:10 p.m.5 views

mantra

「🔑」 Acerca de Mantra La herramienta en cuestión fue creada en Go y su objetivo principal es buscar claves API en archivos JavaScript y páginas HTML. Funciona revisando el código fuente de páginas web y archivos de script en busca de cadenas que sean idénticas o similares a claves API. Estas clave...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:58 a.m.5 views

CVE-2025-11203-PoC

CVE-2025-11203 — LiteLLM Health Endpoint APIKEY Information Disclosure LiteLLM versions 1.63.14 /health endpoint, when processing the apikey parameter, does not properly filter sensitive information , causing authenticated users to retrieve API Keys stored in other model configurations. The apike...

3.5CVSS5.9AI score0.00416EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 6:04 p.m.2 views

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – Canale laterale sulla lunghezza del testo cifrato di Kyber Codice del programma Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a...

5.5CVSS5.5AI score0.0019EPSS
SaveExploits0
OSV
OSV
added 2026/08/26 3:44 p.m.10 views

CVE-2026-81027 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin succeeds and otherwise rejects the...

8.4CVSS5.7AI score
SaveExploits0References6
NVD
NVD
added 2026/08/18 4:18 p.m.6 views

CVE-2026-75915

CodeWhale versions before 0.8.64 contain an environment variable exposure vulnerability in the jsexecution tool that fails to scrub parent process environment variables before spawning Node.js. Attackers can craft malicious JavaScript code executed by the tool to read process.env and leak API key...

8.7CVSS0.00504EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/17 7:31 p.m.18 views

CVE-2026-57485

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.9.0, the /api/v1/pipeline/handleData endpoint in app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java injects the STIRLING-PDF-BACKEND-API-USER API...

8.5CVSS5.3AI score0.00256EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/08/17 11:04 a.m.30 views

CVE-2026-74900

openssl_encrypt before version 1.4.0 has a flaw in pqc.py: when KEM decapsulation fails, it silently falls back to simulation mode, deriving a deterministic shared secret from just 16 bytes of the private key plus public encapsulated key data. An attacker with those 16 private-key bytes can compu...

9.8CVSS5.4AI score0.00337EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/13 7:14 p.m.7 views

CVE-2026-72632

Observable Discrepancy CWE-203 in Kibana Fleet can lead to information disclosure via Excavation CAPEC-116. Fleet removes the Elasticsearch API key value of an enrolled Elastic Agent from the responses of its agent listing capability, but that capability accepted caller-supplied filter expression...

7.1CVSS5.3AI score0.00247EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/12 2:30 p.m.72 views

CVE-2026-73264

Prowler (cloud security platform) contains an SSRF risk prior to version 5.33.1. An authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compatible provider via POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/...

7.6CVSS5.4AI score0.00319EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/08/11 5:41 p.m.9 views

bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy ...

9.9CVSS7.2AI score0.00899EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/10 8:00 a.m.41 views

CVE-2026-66407

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered...

8.1CVSS0.00184EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 12:32 p.m.19 views

Malicious code in uniswap-sdk-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d01efda86c7ce792f8396d425dce51600262660989f438dd13a17068d9df6d The package presents itself as a Uniswap V4 SDK but its WalletClient constructor captures the caller-supplied private key and POSTs it, along with th...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/08/04 2:30 p.m.28 views

CVE-2026-67618 marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata

marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious baseurl in PEP-723 inline script metadata, which is merged into session configuration with higher precedence than the operator's own setting...

7.1CVSS5.4AI score
SaveExploits0References7
Snyk
Snyk
added 2026/08/03 3:51 a.m.9 views

Improper Input Validation

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power...

9.3CVSS5.5AI score0.00269EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.12 views

Improper Input Validation

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the...

9.3CVSS5.5AI score0.00269EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:51 a.m.11 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the calculateAgreementpub, message method of the DHAgreement class, which raises the peer-supplied message to the power of the local static private key x without any range or subgroup-membership check, while...

9.3CVSS5.5AI score0.00269EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/28 9:49 a.m.14 views

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the ML-KEM Poly.toMsg, Poly.compressPoly, and PolyVec.compressPolyVec routines. An attacker can recover a long-term private key by sending ciphertexts and measuring the time taken by repeated decapsulation operations th...

8.2CVSS5.7AI score0.00345EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/07/28 9:49 a.m.13 views

Timing Attack

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Timing Attack in the ML-KEM Poly.toMsg, Poly.compressPoly, and PolyVec.compressPolyVec routines. An attacker can recover a long-term private key by...

8.2CVSS5.7AI score0.00345EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/07/28 9:49 a.m.12 views

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the ML-KEM Poly.toMsg, Poly.compressPoly, and PolyVec.compressPolyVec routines. An attacker can recover a long-term private key by sending ciphertexts and measuring the time taken by repeated decapsulation operations th...

8.2CVSS5.7AI score0.00345EPSS
SaveExploits1References2
Rows per page
Query Builder