Search Vulnerabilities

Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API

Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL

Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header

Odh-dashboard: odh dashboard kubernetes service account exposure

v2board / Xboard Authentication Token Exposure via loginWithMailLink

WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Sensitive Data Exposure vulnerability

WordPress The Tribal plugin <= 1.3.4 - Sensitive Data Exposure vulnerability

WordPress RepairBuddy plugin <= 4.1132 - Sensitive Data Exposure vulnerability

WordPress 12 Step Meeting List plugin <= 3.19.9 - Sensitive Data Exposure vulnerability

WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability

WordPress Doofinder for WooCommerce plugin <= 2.10.13 - Sensitive Data Exposure vulnerability

WordPress Simple History plugin <= 5.24.0 - Sensitive Data Exposure vulnerability

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain other users...

Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies

WordPress SMTP Mailer plugin <= 1.1.24 - Sensitive Data Exposure vulnerability

WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerability

lz4_flex: Decompression can leak information from uninitialized memory or reused output buffer

Discourse leaks private topic metadata to non-authorized users

Discourse leaks private topic title and post excerpt via user action API endpoint