Fastify JavaScript saveRequestFiles DoS

The vulnerability of the saveRequestFiles function in the Fastify JavaScript software framework is related to the use of incorrect authentication tokens due to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending special...

CVE-2024-52329 ECOVACS HOME mobile app plugins do not properly validate TLS certificates

ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens...

CVE-2024-52329: Improper Certificate Validation

ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can read or modify TLS traffic and obtain authentication tokens...

PT-2025-1271

Name of the Vulnerable Software and Affected Versions @fastify/multipart versions prior to 8.3.1 @fastify/multipart versions prior to 9.0.3 Description @fastify/multipart is a Fastify plugin used for parsing the multipart content-type. The saveRequestFiles function fails to delete uploaded...

PT-2025-2927

Name of the Vulnerable Software and Affected Versions ECOVACS HOME affected versions not specified Description The ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. This allows an unauthenticated attacker to read or modify TLS traffic and obtain...

CVE-2024-9133

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-9133

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-47517

Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access...

CVE-2024-9133 A user with administrator privileges is able to retrieve authentication tokens

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-9133 A user with administrator privileges is able to retrieve authentication tokens

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-9133

CVE-2024-9133 affects Arista Edge Threat Management - Arista NG Firewall (versions 17.1.1 and earlier). A user with administrator privileges can retrieve authentication tokens via the NGFW UI. The Arista Security Advisory 0105 documents this under CVE-2024-9133 and notes no known mitigation in th...

CVE-2024-9133: Improper Authentication

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-47517: Exposure of Sensitive Information Through Metadata

Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access...

PT-2025-3709

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A user with administrator privileges is able to retrieve authentication tokens. Recommendations At the moment, there is no information about a newer versi...

GO-2024-3296 Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli...

AZL-53759 CVE-2024-53858 affecting package gh for versions less than 2.13.0-24

The gh cli is GitHub’s official command line tool. A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com. This vulnerability stems from several gh commands...

GHSA-JWCM-9G39-PMCW Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts

Summary A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com. Details This vulnerability stems from several gh commands used to clone a repository with...

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts

Summary A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com. Details This vulnerability stems from several gh commands used to clone a repository with...

`auth.TokenForHost` violates GitHub host security boundary when sourcing authentication token within a codespace

Summary A security vulnerability has been identified in go-gh that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. Details go-gh sources authentication tokens from different environment variables depending on the host involved: - GITHUBTOKEN...

GHSA-55V3-XH23-96GH `auth.TokenForHost` violates GitHub host security boundary when sourcing authentication token within a codespace

Summary A security vulnerability has been identified in go-gh that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. Details go-gh sources authentication tokens from different environment variables depending on the host involved: - GITHUBTOKEN...