8 matches found
CVE-2026-49187
CVE-2026-49187 concerns hard-coded APK resource files that never expire and a shared scepter that can lead to information leaks and potential misuse. According to the entry, exploitation is network-based with low attack complexity and no privileges required, causing high confidentiality impact (t...
EUVD-2018-11747
Malware in sbrugna...
EUVD-2024-39424
Malicious code in bioql PyPI...
CVE-2024-42056
Retool self-hosted enterprise through 3.40.0 inserts resource authentication credentials into sent data. Credentials for users with "Use" permissions can be discovered by an authenticated attacker via the /api/resources endpoint. The earliest affected version is 3.18.1...
CVE-2024-42056
Retool self-hosted enterprise through 3.40.0 inserts resource authentication credentials into sent data. Credentials for users with "Use" permissions can be discovered by an authenticated attacker via the /api/resources endpoint. The earliest affected version is 3.18.1...
CVE-2021-41587
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover credentials for other resources...
CVE-2020-14371
A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite...
Knowage Trust Management Issues Vulnerabilities
Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A trust management issue vulnerability exists in Knowage 6.1.1 and prior versions. An attacker can exploit this vulnerability to obtain arbitrary resource credentials...