/
data_types_exposed:environment_variables × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · high

Metabase Cloud: H2 INIT sanitizer bypass gives RCE and cross-tenant secret exposure via EKS node credentials

Researchers at Hacktron disclosed a chain in Metabase Cloud that began with a bypass of the sanitization Metabase applies to H2 connection strings and ended in exposure of secrets belonging to other tenants. Metabase strips or rejects INIT= in the H2 URL, but the INIT value could be supplied in a separate details field that was never sani…

technology cloud services
bleepingcomputer.com · critical

Zeabur breached twice in two months via leaked plaintext credentials; 321,810 accounts exposed, platform shutting down

Zeabur, a developer hosting and deployment platform, disclosed that on October 14-15, 2026 an attacker used leaked internal credentials stored in plaintext to compromise its shared clusters, some Dedicated Servers and internal systems, and ultimately read the production database. The breach affected shared clusters in nine regions, 321,81…

technology cloud_services