Search Vulnerabilities

Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injection

Nautobot: GitRepository.current_head field should not be writable through REST API

An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1

view_component: Preview Route Can Dispatch Inherited Helper Methods

IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution

Arqit SKA-Platform Enables Access to Debug Information

Arqit SKA-Platform Vulnerable to Key Exposure

Fuji Electric Tellus Exposed Dangerous Method or Function

An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak ac...

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

Exposed dangerous function in windows host

Exposed Dangerous Method or Function in GitLab

Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) users

OneUptime Synthetic Monitor RCE via exposed Playwright browser object

An exposed dangerous method in Ivanti DSM before version 2026

OneUptime Synthetic Monitor RCE via exposed Playwright browser object

RustDesk rustdesk://config/ URI Silently Re-homes Client to Attacker-Controlled Server

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check

Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint

OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access