Search Vulnerabilities

Account Takeover via Predictable SSO Ticket Generation

Netty QUIC stateless reset token material exposed through header-visible connection IDs

Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port

In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues

Spring Framework Predictable Session ID in WebSocket Module

netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures

Permissive TrustAllCerts TLS Verification

Predictable afpd session token

Magento LTS: Weak API Session ID — Predictable MD5 of Time-Derived Inputs

RELATE: Predictable Token Generation in auth.py and exam.py

chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values

Values produced by ${random

FreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute Force

DNN has same HostGUID for all new installs

Chamilo LMS has Weak REST API Key Generation (Predictable)

OpenClaw < 2026.4.2 - PKCE Verifier Exposure via OAuth State Parameter

open-webui JWT Key start_windows.bat random values

XikeStor SKS8310-8X Predictable Session Identifiers

A vulnerability in the SAML 2

Gradio has Open Redirect in OAuth Flow