bofhound

THIS REPO IS NO LONGER ACTIVE ⛔🚧 This repo is no longer maintained. To submit an issue, pull request, or obtain the lastest version, reference https://github.com/coffeegist/bofhound 🚧⛔ | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. | | | | | | | |...

DNS-resolve-checker

DNS-resolver Usage bash pdnscheck.sh follow the steps...

CVE-2026-123786 Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets fr...

CVE-2026-123786

Agenta versions before 0.122.5 are vulnerable to a server-side request forgery (SSRF) vulnerability. Workspace members with workflow edit rights can exploit this by setting arbitrary revision URLs to redirect workflow invocations. This flaw allows attackers to capture the secret-resolve Authoriza...

CVE-2026-123786 Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets fr...

CVE-2026-123786 Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit rights to redirect workflow invocations by setting arbitrary revision URLs. Attackers can capture the attached secret-resolve Authorization token to read provider secrets fr...

CVE-2026-123119

The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts, allowing for DNS rebinding to bypass private network restrictions, resulting in enumeration of internal hosts and ports in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x...

CVE-2026-123119

The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts, allowing for DNS rebinding to bypass private network restrictions, resulting in enumeration of internal hosts and ports in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x...

EUVD-2026-117435

The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts, allowing for DNS rebinding to bypass private network restrictions, resulting in enumeration of internal hosts and ports in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x...

PT-2026-137457

The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts, allowing for DNS rebinding to bypass private network restrictions, resulting in enumeration of internal hosts and ports in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x...

CVE-2026-120426

OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded currentuser parameter into the file path, which the portal forwards with...

CVE-2026-120426

OpenCSG CSGHub (through version v2.6.0-ce ) is vulnerable to an authorization bypass in the unauthenticated file resolve route. This flaw allows remote attackers to read private repository files, including model, code, or space repositories . The root cause is the ability for an attacker to injec...

CVE-2026-120426 OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route

OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded currentuser parameter into the file path, which the portal forwards with...

CVE-2026-120426 OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route

OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded currentuser parameter into the file path, which the portal forwards with...

EUVD-2026-115235

OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded currentuser parameter into the file path, which the portal forwards with...

PT-2026-135442

Name of the Vulnerable Software and Affected Versions OpenCSG CSGHub versions prior to 2.6.0-ce Description An authorization bypass exists in the unauthenticated file resolve route. Remote attackers can read files from private model, code, or space repositories by injecting a percent-encoded...

CVE-2026-120426: OpenCSG CSGHub: OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve…

OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that allows remote attackers to read private repository files. Attackers can inject a percent-encoded currentuser parameter into the file path, which the portal forwards with...

Malicious code in @axon-web/icons (npm)

Source: amazon-inspector 579025dc4de76ecd9400215e99d550cb4579ab6eb7d78e4c3c91a2299ff59c91 On require, index.js constructs an identifier from os.hostname and process.env.USER/USERNAME and issues a DNS resolve against a subdomain of nxsqlpejfpamagxctjyv4c9qj1gfdtzwi.oast.fun — an interactsh/OAST...

MAL-2026-18433 Malicious code in @axon-web/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee650ff91eeb70cc76f880c6b66b586b21c471c95eac22a9e23160aaffa45a58 The package is advertised as an SVG icon library but, on require, runs an IIFE that constructs an identifier from os.hostname and...

Malicious code in @axon-web/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee650ff91eeb70cc76f880c6b66b586b21c471c95eac22a9e23160aaffa45a58 The package is advertised as an SVG icon library but, on require, runs an IIFE that constructs an identifier from os.hostname and...