🚨 New plugin: MonstaFtpVersionPlugin (CVE-2025-34299). MonstaFTP RCE vulnerability detection - versions < 2.11.3 affected. Results: https://leakix.net/search?scope=leak&q=%2Bplugin%3AMonstaFtpVersionPlugin

🚨 New plugin: SessionReaperPlugin (CVE-2025-54236) added. Multiple Adobe Commerce / Magento instances exposed. Patch ASAP. Details: https://slcyber.io/assetnote-security-research-center/why-nested-deserialization-is-still-harmful-magento-rce-cve-2025-54236/ Query: +plugin:SessionReaperPlugin

🚨 New plugin for Oracle E-Business Suite's CVE-2025-61882 is up. First huge plugin by Chocapikk 🥳 LeakIX now has OOB scanning capability! The check based on actual vulnerability evaluation ( as opposed to Last-Modified fingerprinting that can be unreliable ).

🚨 New plugin for ViteJS's CVE-2025-30208 is up. It's dev, nothing wrong can happen right? Have fun. Source: https://x.com/phithon_xg/status/1905351732500250711

🚨 New plugin for CrushFTP's CVE-2025-2825/CVE-2025-31161 is up. While enumerating users to validate vulnerable instances we noticed a pattern. It's on all instances we scanned for, can you see it? What do you make of it?

🚨 Detection for Cisco ASA CVE-2020-3259 has been added. ~2.5k vulnerable instances still found on a 5 years old vulnerability allowing for session hijacking and credentials stealing. Source: https://cyberplace.social/@GossiTheDog/111848755813858062 Query: +plugin:CiscoASAPlugin

🚨 Detection for Kerio Control's CVE-2024-52875 has been added. ~500 vulnerable instances have been found. Hosting providers & CERTs have been notified, patch now! Credits: https://karmainsecurity.com/hacking-kerio-control-via-cve-2024-52875 Query: +plugin:KerioControlPlugin

💡No #opendir? Why don't you check for .DS_Store files listing the structure ? Our scans found 11,856,006 IPs and DNS exposing the file. Link: https://leakix.net/search?scope=leak&q=%2Bplugin%3ADotDsStoreOpenPlugin Ref: https://0day.work/parsing-the-ds_store-file-format/

⚠️ During our scans we found ~70K applications exposing their VSCode SFTP config. These are often critical and can include FTP/SSH credentials. You can check this out here: https://leakix.net/search?q=%2Bplugin%3AVsCodeSFTPPlugin&scope=leak #cybersecurity #vscode #vulnerability

💡 Have you checked our 3rd party Docker registry scan plugin? Eg, looking for images names aimed at production environments: +plugin:DockerRegistryHttpPlugin And as a reminder, we have a Docker Registry Exploration tool at https://github.com/leakIX/dre.

🚨 New pro plugin is in! We are now looking for mis-configured Spring Boot actuators and indexing metadata to help with research! Query: +plugin:"SpringBootActuatorPlugin" Thanks: @Chocapikk_ for the idea! Credits: www.wiz.io/blog/spring-...

🚨 Detection for Mitel MiCollab's CVE-2024-35286 and CVE-2024-41713 has been added. ~2000 vulnerable instances have been found. Hosting providers & CERTs have been notified, patch now! Credits: @watchtowrcyber Thanks: @Chocapikk_

Let's see if there's anyone up on this service :)

🚨This a yearly reminder to check for PHP information pages where sensitive environment variables could be shared. More than 800K affected services on LeakIX. 👇👇👇 Example: Leaked Azure database credentials and authentication signing key.