Search Vulnerabilities

Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker

Mercator has a Personal Identifiable Information Leak from Query Executor feature

Joomla! Component JoomProject 1.1.3.2 Information Disclosure

QuMagie

Apache Answer: Authorization Bypass in Timeline API

HelloTalk through 3

Authentication Bypass in Kidsview

OTP Bypass in Digital Operation Services' WifiBurada

Apache CloudStack: Any user can attach a volume in their VMs from backups they should not have access to

Apache CloudStack: Any user can create a new VM from backups they should not have access to

Information Disclosure in MeWare Software's PDKS

LangSmith SDK: Streaming token events bypass output redaction

Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user

Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies

Org.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

AVideo Platform 8.1 - Information Disclosure (User Enumeration)

Information Disclosure vulnerability in SAP Commerce Cloud

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation

Apache Answer: Revision API Improper Access Control leads to Information Disclosure