Search Vulnerabilities

django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings

Multiple Vulnerabilities in IBM Engineering AI hub.

Sensitive Information Disclosure in HTTP header

Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parameter

Frigate viewer can read logs exposing admin and camera credentials

Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter

Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring

Portainer: JWT accepted in URL query leaks tokens to logs and referers

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.

WWBN AVideo: Password Hash Leaked in MobileManager OAuth Redirect URL Enables Account Takeover

Apache OpenMeetings: Login Credentials Passed via GET Query Parameters

Plane Exposes User Email (PII and part of credential) in GET Parameter

Nhost Leaks the Refresh Token via URL Query Parameter in OAuth Provider Callback

immich-server: Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared Albums

PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems

IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information

Gainsight Assist plugin information disclosure

IBM Sterling Partner Engagement Manager Information Disclosure

Multiple vulnerabilities in IBM Aspera Orchestrator