Search Vulnerabilities

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs ...

Spectrum session token in URL

IBM i Information Disclosure

HCL iAutomate is susceptible to a sensitive information disclosure

Sensitive form data in URL query parameters

Plain Text Transmission of Username and Password in the URL

Sending Password in GET Request

OpenText Enterprise Security Manager Information Exposure

Audiobookshelf vulnerable to OIDC token exfiltration and account takeover

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP300) (...

File Browser allows sensitive data to be transferred in URL

Sensitive Data in URL

Use of GET Request Method With sensitive Query Strings

Sensitive information submitted using GET method

Moodle: csrf token exposure via url in moodle mod_data module

Weblate VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext

BlackVue App API deviceDelete get request method with sensitive query strings

Multiple vulnerabilities in Trivision Camera NC227WF

Outback Power Mojave Inverter Use of GET Request Method With Sensitive Query Strings

A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130