Lucene search
+L

78 matches found

Kitploit
Kitploit
added 2026/09/15 6:56 a.m.10 views

CVE-2025-4664

🔒 Vulnerabilidad CVE-2025-4664 La vulnerabilidad CVE-2025-4664 es un fallo de seguridad de alta gravedad identificado en el componente Loader de Google Chrome, presente en versiones anteriores a la 136.0.7103.113. Este problema permite a un atacante remoto filtrar datos de origen cruzado mediante...

4.3CVSS6.6AI score0.05625EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 11:35 p.m.7 views

cve-2025-4664

CVE-2025-4664 Este repositorio contiene un PoC para explotar CVE-2025-4664, una vulnerabilidad donde los navegadores basados en Chromium filtran parámetros de URL sensibles a través de solicitudes de precarga del encabezado Link. Recursos Para una explicación detallada de cómo funciona este...

4.3CVSS6.6AI score0.05625EPSS
SaveExploits2
NVD
NVD
added 2026/09/10 2:17 p.m.8 views

CVE-2026-88887

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS0.00304EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 2:17 p.m.8 views

CVE-2026-88880

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructur...

9.2CVSS0.00357EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 2:17 p.m.8 views

CVE-2026-88882

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS0.00304EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 2:17 p.m.11 views

CVE-2026-88881

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

9.2CVSS0.00304EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.36 views

CVE-2026-88887 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.8 views

CVE-2026-88887 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/10 1:05 p.m.13 views

EUVD-2026-75437

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS0.00304EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 1:05 p.m.24 views

CVE-2026-88887

Renovate (dependency update automation tool) is vulnerable to credential exfiltration when listing tags/digests for container images. The root cause is that Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches registry credentials to the follow-up...

9.2CVSS0.00304EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 1:05 p.m.6 views

EUVD-2026-75432

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS0.00304EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.34 views

CVE-2026-88882 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.9 views

CVE-2026-88882 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS5.8AI score
SaveExploits0References4
CVE
CVE
added 2026/09/10 1:05 p.m.14 views

CVE-2026-88882

Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images before 15.4.0, helm chart before 10.4.0), when fetching package versions from a NuGet registry , Renovate follows pagination URLs returned in the HTTP Link header without verifying the targ...

9.2CVSS0.00304EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 1:05 p.m.12 views

EUVD-2026-75431

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

9.2CVSS0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.9 views

CVE-2026-88881 Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

9.2CVSS5.8AI score
SaveExploits0References4
CVE
CVE
added 2026/09/10 1:05 p.m.20 views

CVE-2026-88881

Renovate versions before 44.11.3 are vulnerable to credential exfiltration when following pagination links in the HTTP Link header. The root cause is that the pagination URL returned by a GitHub server is not validated against the originally contacted host, allowing a malicious or compromised ser...

9.2CVSS0.00304EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.37 views

CVE-2026-88881 Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...

9.2CVSS0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.8 views

CVE-2026-88880 Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructur...

9.2CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/10 1:05 p.m.8 views

EUVD-2026-75430

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructur...

9.2CVSS0.00357EPSS
SaveExploits0References2
Rows per page
Query Builder