Search Vulnerabilities

Shopware SSO referer trust leading to an arbitrary redirect target

Unblu Spark Open Redirect leading to DOM-Based XSS

Open Redirect in Universal Sotware's FlexCity

trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect

cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned State

Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2

dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets

Multiple Vulnerabilities in IBM Engineering AI hub.

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theft

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion

Redash: Open redirect vulnerability in post-login redirect handling

Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url

Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

Symfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection

An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs

Open Redirect vulnerability in SAP Approuter

Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007

Snipe-IT: Open Redirect After User Edit