PILOS security vulnerabilities

PILOS is an open source front-end software from THM. A security vulnerability exists in PILOS versions prior to 4.8.0 that stems from a misconfiguration of cross-resource sharing, which could lead to a malicious website sending a request containing credentials...

Hiberus Sintra security vulnerabilities

Hiberus Sintra is a service management platform from the Spanish company Hiberus. A security vulnerability exists in Hiberus Sintra that stems from a cross-resource sharing misconfiguration that could lead to the execution of privileged operations and access to confidential information...

Claude Code Router security vulnerability

Claude Code Router is an enhancement to the flexibility and customizability of Claude Code by musi individual developers. A security vulnerability exists in Claude Code Router versions prior to 1.0.34, which stems from a misconfiguration of cross-resource sharing that could lead to credential...

ZIV IDF and ZIV ZLF security vulnerabilities

The ZIV IDF and ZIV ZLF are both transformer differential protection relays from ZIV Spain. A security vulnerability exists in ZIV IDF version v0.10.0-0C03-03 and ZLF version v0.10.0-0C03-04, which stems from a cross-resource sharing misconfiguration...

ZIV IDF and ZIV ZLF security vulnerabilities

The ZIV IDF and ZIV ZLF are both transformer differential protection relays from ZIV Spain. A security vulnerability exists in ZIV IDF version v0.10.0-0C03-03 and ZLF version v0.10.0-0C03-04, which stems from a cross-resource sharing configuration error...

Omnissa UAG security vulnerability

Omnissa UAG Omnissa Unified Access Gateway is a unified access gateway from Omnissa Corporation. A security vulnerability exists in the Omnissa UAG that stems from a cross-resource sharing bypass that could result in bypassing administrator-configured CORS restrictions to access sensitive network...

HCL Compass Cross-Site Request Forgery Vulnerability

HCL Technologies Compass is a low-code change management software from HCL Technologies, USA. It manages the full range of testing activities and integration with developer tools. A security vulnerability exists in HCL Compass that stems from the presence of a Cross Resource Sharing CORS...

Last Yard security vulnerabilities

Last Yard is a shelf-edge promotional platform from Last Yard Australia. A security vulnerability exists in Last Yard version 22.09.8-1, which stems from the fact that it allows an attacker to enable cross-resource sharing...

IBM Spectrum Protect Plus access control vulnerability

IBM Spectrum Protect Plus is a data protection platform from IBM USA. The platform provides enterprises with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of all sizes.A security vulnerability exists in IBM Spectrum Protect...