PT-2025-16392

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can check the existence of usernames in the system by querying an API. Recommendations At the moment, there is no information about a newer version that contains a...

How generate a Citrix Cloud bearer token and use it on a PowerShell API query

This article outlines the steps to generate a Citrix Cloud bearer tokenand use it on a PowerShell API query...

DEBIAN-CVE-2022-3100

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API...

GitLab Input Validation Error Vulnerability (CNVD-2021-34555)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in GitLab...

GitLab 输入验证错误漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in GitLab...

Authorization Bypass

spree is vulnerable to authorization bypass. An attacker is able to bypass authorization checks by passing an empty string as the token and successfully query the API for any completed order...

Unspecified Vulnerability in GitLab (CNVD-2020-63392 )

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions prior ...