Tag
Cross-Tenant IDOR in Convoy API Exposes Broker Credentials
2 TTPs 1 CVEConvoy versions up to and including 26.6.2 contain an Insecure Direct Object Reference (IDOR) vulnerability that allows authenticated users to leak plaintext message broker credentials from other tenants.
CVE-2026-6429 netrc Credential Leak Vulnerability
1 rule 1 CVECVE-2026-6429 is a credential leak vulnerability affecting Microsoft products.
Apache Airflow OpenSearch Provider Credentials Leak via Task Logs (CVE-2026-43826)
2 rulesThe OpenSearch logging provider in Apache Airflow Providers OpenSearch versions before 1.9.1 wrote host URLs containing embedded credentials into task logs, potentially exposing them to unauthorized users with task-log read permission (CVE-2026-43826).
cpp-httplib Vulnerability Leads to Credential Leakage via HTTP Redirects
2 rules 1 TTPThe cpp-httplib library prior to version 0.39.0 forwards stored authentication credentials to arbitrary hosts via HTTP redirects, potentially exposing sensitive information to malicious actors.
Flowise Public Chatflow Endpoint Exposes Sensitive Data
2 rules 2 TTPsFlowise versions 3.0.13 and earlier expose sensitive information, including credential IDs, plaintext API keys, and passwords, through the `GET /api/v1/public-chatflows/:id` endpoint, leading to account compromise and revealing internal architecture details.