Tag
CVE-2026-6429 netrc Credential Leak Vulnerability
1 rule 1 CVECVE-2026-6429 is a credential leak vulnerability affecting Microsoft products.
Apache Airflow OpenSearch Provider Credentials Leak via Task Logs (CVE-2026-43826)
2 rulesThe OpenSearch logging provider in Apache Airflow Providers OpenSearch versions before 1.9.1 wrote host URLs containing embedded credentials into task logs, potentially exposing them to unauthorized users with task-log read permission (CVE-2026-43826).
cpp-httplib Vulnerability Leads to Credential Leakage via HTTP Redirects
2 rules 1 TTPThe cpp-httplib library prior to version 0.39.0 forwards stored authentication credentials to arbitrary hosts via HTTP redirects, potentially exposing sensitive information to malicious actors.
Flowise Public Chatflow Endpoint Exposes Sensitive Data
2 rules 2 TTPsFlowise versions 3.0.13 and earlier expose sensitive information, including credential IDs, plaintext API keys, and passwords, through the `GET /api/v1/public-chatflows/:id` endpoint, leading to account compromise and revealing internal architecture details.