Search Vulnerabilities

CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure

Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers

Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins

Next.js - Critical - Access bypass - SA-CONTRIB-2025-122

Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access

Altium 365 Over-Permissive CORS Configuration Allows Credentialed Cross-Origin Workspace Access

OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

PILOS Misconfigured the Access-Control-Allow-Origin Header

Strapi core vulnerable to sensitive data exposure via CORS misconfiguration

IBM Aspera Faspex cross-origin resource sharing

CodeCanyon/ui-lib Mentor LMS API cross-domain policy

Cross-origin resource sharing (CORS) in Hiberus Sintra

Rob--W / cors-anywhere Misconfigured CORS Proxy Allows SSRF

claude-code-router CORS. misconfiguration

IBM Concert Software cross-origin resource sharing

Overly Permissive CORS Policy in WAGO Device Manager

CORS vulnerability in IDF and ZLF

CORS vulnerability in IDF and ZLF

itwanger paicoding CrossUtil.java cross-domain policy

Freeebird Hotel 酒店管理系统 API SessionInterceptor.java cross-domain policy