Tag
SSRF and Credential Leakage in AWX Notification Backends
3 TTPs 1 CVECVE-2026-71366 allows authenticated AWX notification administrators to perform SSRF and exfiltrate credentials by leveraging insufficient validation of notification template targets.
PraisonAI GitHub Actions Credential Leakage Vulnerability (CVE-2026-40313)
2 rules 2 TTPs 1 CVEPraisonAI versions 4.5.139 and below are vulnerable to credential leakage due to the ArtiPACKED attack, where GitHub Actions workflows using actions/checkout without persist-credentials: false write the GITHUB_TOKEN into the .git/config file, leading to potential exposure in uploaded artifacts and subsequent supply chain compromise.
HAPI FHIR Credential Leakage via Improper URL Prefix Matching
2 rules 1 TTP 2 IOCsHAPI FHIR Core is vulnerable to authentication credential leakage due to improper URL prefix matching on HTTP redirects, allowing attackers to intercept credentials by hosting a domain that is a prefix of a configured FHIR server URL.
Glances IP Plugin SSRF Vulnerability Leading to Credential Leakage
3 rules 3 TTPs 1 IOCA server-side request forgery (SSRF) vulnerability exists in the Glances IP plugin due to improper validation of the public_api configuration parameter, allowing attackers to force outbound HTTP requests and potentially leak credentials via the Authorization header.