Search Vulnerabilities

Textream Cross-Site WebSocket Hijacking (CSWSH) vulnerability

calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing

Local admin could to leak information from the Genetec Update Service configuration web page

Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy

CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure

Feathers has an origin validation bypass via prefix matching

Cache poisoning in @sveltejs/adapter-vercel

OpenClaw session tool visibility hardening and Telegram webhook secret fallback

Insufficient Origin Validation in Proctorio Chrome Extension postMessage Handlers

Origin Validation Error in GitLab

Certain HP OfficeJet Pro Printers - Information Disclosure

Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration

AliasVault is Missing Origin Validation in Android Passkey Credential Provider

Prowise Reflect v1.0.9 - Remote Keystroke Injection

Account Takeover Vulnerability in Appsmith

DNS Rebinding Vulnerability in mlflow/mlflow

React Router has CSRF issue in Action/Server Action Request Processing

A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on aff...

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service conditi...

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a ...