Lucene search
K

4 matches found

Kitploit
Kitploit
added 2025/04/18 12:30 p.m.38 views

TruffleHog Explorer - A User-Friendly Web-Based Tool To Visualize And Analyze Data Extracted Using TruffleHog

Welcome to TruffleHog Explorer , a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to a credential a machine...

7.4AI score
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/03/17 12:17 a.m.51 views

CVE-2025-30066

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code...

8.6CVSS7AI score0.9183EPSS
Exploits2References1
OSV
OSV
added 2025/03/15 6:15 a.m.13 views

CVE-2025-30066

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code...

8.6CVSS8.6AI score0.9183EPSS
Exploits2References21
CVE
CVE
added 2025/03/15 12:0 a.m.306 views

CVE-2025-30066

CVE-2025-30066 affects tj-actions/changed-files before 46, where a malicious commit (0e58ed8) was used to alter tags (e.g., v1, v45.0.7) and cause secrets to be read from GitHub Actions logs. Public reports and advisories (CISA, OSV, GHSA) confirm secrets disclosure via runners’ logs in affected ...

8.6CVSS8.6AI score0.9183EPSS
In wildExploits2References21Affected Software1
Rows per page
Query Builder