Lucene search
+L

11 matches found

attackerkb
attackerkb
•added 2026/07/30 7:06 p.m.•15 views

CVE-2026-10569

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an...

4.3CVSS5.9AI score0.00301EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2026/07/30 7:06 p.m.•16 views

CVE-2026-10569 IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an...

4.3CVSS6AI score0.00301EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/30 12:00 a.m.•2 views

CVE-2026-10569: Exposure of Sensitive Information to an Unauthorized Actor

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an...

4.3CVSS6AI score0.00301EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/22 12:06 p.m.•17 views

EUVD-2026-47653

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...

3.3CVSS5.2AI score0.00127EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/06/29 1:18 p.m.•29 views

CVE-2026-56457

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step...

4.3CVSS5.8AI score0.00301EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/29 1:18 p.m.•42 views

CVE-2026-56457

The CVE concerns HCL DevOps Deploy / HCL Launch with a vulnerability that allows exposure of sensitive information via output logs. The description notes that an attacker with access to the logs could potentially obtain sensitive values associated with a step. The Connected CVE lists confirm the ...

4.3CVSS6AI score0.00301EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/29 12:00 a.m.•1 views

CVE-2026-56457: Insertion of Sensitive Information into Log File

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step...

4.3CVSS6.1AI score0.00301EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-29496

Malicious code in bioql PyPI...

6.6AI score
SaveExploits0References3
OSV
OSV
•added 2025/07/21 7:19 p.m.•11 views

GHSA-C5QX-P38X-QF5W RageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs

Summary Log output includes authentication token that provides full account access Details The post job action prints the contents of config/config.vdf which holds the saved authentication token and can be used to sign in on another machine. This means any public use of this action leaves...

8.7CVSS6.8AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/07/21 7:19 p.m.•20 views

RageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs

Summary Log output includes authentication token that provides full account access Details The post job action prints the contents of config/config.vdf which holds the saved authentication token and can be used to sign in on another machine. This means any public use of this action leaves...

6.8AI score
SaveExploits0References3Affected Software1
Kitploit
Kitploit
•added 2021/10/18 11:30 a.m.•72 views

ImpulsiveDLLHijack - C# Based Tool Which Automates The Process Of Discovering And Exploiting DLL Hijacks In Target Binaries

C based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during RedTeam Operations to evade EDR's. 1. Methodological Approach : The tool basically acts on automating following stages performed for...

7.6AI score
SaveExploits0References1
Rows per page
Query Builder