Search Vulnerabilities

Sensitive Data Exposure

AgenticMail API/storage and outbound relay hardening

@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Fiber: HSTS header never set in helmet middleware due to incorrect protocol check

Vulnerabilities found in Watson Data Intelligence

Cleartext Transmission of Sensitive Information in Watson Data Intelligence

Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor data

Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)

Deno: TLS retry copies stale upgrade hook, risking plaintext traffic

HCL Connections is vulnerable to broken access control

Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext

Overview: A vulnerability has been found in FAST/TOOLS and CI Server

Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT Cleartext Transmission of Sensitive Information

Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords

Client side encryption fails to encrypt values in a $vectorSearch

Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models

Potential unencrypted email transmission via STARTTLS in the SMTP backend

A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2