Lucene search
+L

78 matches found

Kitploit
Kitploit
added 2026/09/15 6:56 a.m.10 views

CVE-2025-4664

🔒 Vulnerability CVE-2025-4664 The CVE-2025-4664 vulnerability is a high-severity security flaw identified in the Loader component of Google Chrome, present in versions prior to 136.0.7103.113. This issue allows a remote attacker to leak cross-origin data via a specially crafted HTML page,...

4.3CVSS6.8AI score0.05625EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 11:35 p.m.7 views

cve-2025-4664

CVE-2025-4664 此仓库包含用于利用 CVE-2025-4664 的 PoC。该漏洞可使基于 Chromium 的浏览器通过 Link 标头预加载请求泄露敏感的 URL 参数。 资源 有关此漏洞利用原理的详细说明,请阅读博客文章:https://amalmurali.me/posts/cve-2025-4664e。 观看以下视频以了解整个流程: 文件 target.py - 存在漏洞的 Web 应用程序 idp.py - SSO 身份提供程序 attacker.py - 记录已泄漏令牌的恶意服务器 templates/ - 演示所用的 HTML 模板 static/ -...

4.3CVSS6.8AI score0.05625EPSS
SaveExploits2
NVD
NVD
added 2026/09/10 2:17 p.m.9 views

CVE-2026-88887

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS0.00304EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 2:17 p.m.8 views

CVE-2026-88880

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructur...

9.2CVSS0.00357EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 2:17 p.m.8 views

CVE-2026-88882

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS0.00304EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 2:17 p.m.11 views

CVE-2026-88881

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

9.2CVSS0.00304EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.36 views

CVE-2026-88887 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.8 views

CVE-2026-88887 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/10 1:05 p.m.13 views

EUVD-2026-75437

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS5.8AI score0.00304EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 1:05 p.m.24 views

CVE-2026-88887

Renovate (dependency update automation tool) is vulnerable to credential exfiltration when listing tags/digests for container images. The root cause is that Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches registry credentials to the follow-up...

9.2CVSS5.8AI score0.00304EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.34 views

CVE-2026-88882 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS0.00304EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 1:05 p.m.6 views

EUVD-2026-75432

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS5.8AI score0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.9 views

CVE-2026-88882 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS5.8AI score
SaveExploits0References4
CVE
CVE
added 2026/09/10 1:05 p.m.14 views

CVE-2026-88882

Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images before 15.4.0, helm chart before 10.4.0), when fetching package versions from a NuGet registry , Renovate follows pagination URLs returned in the HTTP Link header without verifying the targ...

9.2CVSS5.8AI score0.00304EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 1:05 p.m.12 views

EUVD-2026-75431

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

9.2CVSS5.7AI score0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.9 views

CVE-2026-88881 Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

9.2CVSS5.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.37 views

CVE-2026-88881 Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

9.2CVSS0.00304EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 1:05 p.m.20 views

CVE-2026-88881

Renovate versions before 44.11.3 are vulnerable to credential exfiltration when following pagination links in the HTTP Link header. The root cause is that the pagination URL returned by a GitHub server is not validated against the originally contacted host, allowing a malicious or compromised ser...

9.2CVSS5.7AI score0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.8 views

CVE-2026-88880 Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructur...

9.2CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/10 1:05 p.m.8 views

EUVD-2026-75430

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructur...

9.2CVSS5.8AI score0.00357EPSS
SaveExploits0References2
Rows per page
Query Builder