17 matches found
S3Scanner
S3Scanner 보안이 설정되지 않은 S3 버킷을 찾아 내용을 덤프하는 빠르고 간단한 스크립트입니다 💧 사용 방법 이 도구는 두 부분으로 구성되어 있습니다: 1 - s3finder.py 이 스크립트는 도메인 이름 목록을 받아 해당 도메인이 Amazon S3에서 호스팅되는지 확인합니다. 발견된 S3 도메인은 'domain:region' 형식으로 해당 리전과 함께 파일에 출력됩니다. 설치: 1. 선택 사항 virtualenv venv && source ./venv/bin/activate 2. pip install -r...
CVE-2026-94204
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, a...
CVE-2026-94204 Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, a...
EUVD-2026-89457
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, a...
CVE-2026-94204
The Viidure Dashcam Android Application suffers from a critical misconfiguration where the central cloud storage backend is assigned public-read permissions . This flaw allows anyone on the internet unrestricted access to the shared storage bucket, exposing sensitive user records , live dashcam f...
CVE-2026-94204 Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, a...
CVE-2026-81182: Authorization Bypass Through User-Controlled Key
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, an unauthenticated attacker who holds a public read-write note share link can disclose an uploaded file or image from the same project by updating the shared note to reference the target asset filename. The...
CVE-2026-75847 Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail
Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...
EEF-CVE-2026-75847 Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail
Summary Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated...
EUVD-2026-68142
Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...
PT-2026-83503
Cleartext Storage of Sensitive Information vulnerability in ash-project ash paper trail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated versio...
orca-poc-target
orca-poc-target A deliberately small, deliberately vulnerable...
PT-2024-10735 · Epson · Epson Expression Home Xp255
Name of the Vulnerable Software and Affected Versions: Epson Expression Home XP255 version 20.08.FM10I8 Description: An issue was discovered that allows all values to be read with the SNMPv1 public community, and with the epson community, all the changeable values can be written/updated. This can...
Mapbox: Open Aws Amazon S3 Buckets
Security researcher @saadahmed reported two Mapbox owned S3 buckets with public-read ACL. One of these, mapbox-js, was public-read by design, the other however was not and subsequently was switched to a private ACL. Thank you again @saadahmed, we appreciate you keeping Mapbox security in mind...
CVE-2011-0890: Exposure of Sensitive Information to an Unauthorized Actor
HP Discovery & Dependency Mapping Inventory DDMI 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP service with its default configuration, which allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging the public read...
robot.txt / robots.txt exists on the Web Server (HTTP)
Web Servers can use a file called /robots.txt to ask search engines to ignore certain files and directories. By nature this file can not be used to protect private files from public read access. SPDX-FileCopyrightText: 1999 SecuriTeam Some text descriptions might be excerpted from a referenced...
