Search Vulnerabilities

Apache OpenMeetings: Login Credentials Passed via GET Query Parameters

Plane Exposes User Email (PII and part of credential) in GET Parameter

Nhost Leaks the Refresh Token via URL Query Parameter in OAuth Provider Callback

immich-server: Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared Albums

PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems

IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information

Gainsight Assist plugin information disclosure

IBM Sterling Partner Engagement Manager Information Disclosure

Multiple vulnerabilities in IBM Aspera Orchestrator

wwwupdate.cgi Session token in URL

Gogs: Access tokens get exposed through URL params in API requests

Tugtainer vulnerable to Password Exposure via URL Query Parameter

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs ...

Spectrum session token in URL

IBM i Information Disclosure

HCL iAutomate is susceptible to a sensitive information disclosure

Sensitive form data in URL query parameters

Plain Text Transmission of Username and Password in the URL

Sending Password in GET Request

OpenText Enterprise Security Manager Information Exposure