Tag
Cross-Exchange Data Disclosure in Apache Camel Thrift Component
1 CVEA vulnerability in the camel-thrift component, CVE-2026-85245, allows cross-tenant data disclosure by reusing a shared object instance for unmarshalling Thrift payloads.
Langflow Insecure Credential Encryption and Key Derivation
3 rules 6 TTPs 1 CVELangflow versions 1.10.0 and earlier use a non-cryptographic PRNG to derive Fernet keys from short SECRET_KEYs, allowing unauthenticated attackers who obtain the secret key file to perform offline decryption of all stored user credentials.
binutils: Vulnerability Enables Denial of Service and Data Disclosure
2 TTPsA local attacker can exploit a vulnerability in binutils to cause a Denial of Service condition and disclose sensitive data.
CVE-2026-60104 - Bitwarden Server Vault Key Disclosure and Account Takeover
7 TTPs 1 CVEA low-privileged Bitwarden organization member can exploit CVE-2026-60104 in Bitwarden Server versions prior to 2026.6.0, which allows an attacker to obtain another user's vault key and access token by creating a Trusted Device Encryption authentication request bound to an attacker-controlled public key, leading to account takeover.
FUXA Unauthenticated Project Data Disclosure Vulnerability
2 rules 1 TTPFUXA v1.3.0-2773 is vulnerable to unauthenticated project data disclosure (CVE-2026-47717) via the /api/project endpoint, exposing sensitive configuration data like scripts and device settings, even with security enabled.
Traefik Data Confidentiality Vulnerability
2 rules 1 TTPA vulnerability in Traefik allows an attacker to compromise the confidentiality of data, affecting versions v2.11.x prior to v2.11.44, v3.6.x prior to v3.6.15, and v3.7.0-rc.x prior to v3.7.0-rc.3.
Citrix ADC and Gateway Unauthorized Data Disclosure (CVE-2023-4966)
2 rules 1 TTP 1 CVEExploitation of CVE-2023-4966, known as Citrix Bleed, allows unauthorized data disclosure via the /oauth/idp/.well-known/openid-configuration endpoint, leading to session token theft and potential unauthorized access.