126 matches found
CVE-2026-24052
Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in its trusted domain verification mechanism for WebFetch requests. The application used a startsWith function to validate trusted domains e.g., docs.python.org,...
Open Redirect
Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Open Redirect due to insufficie...
EUVD-2001-1545
Malware in sbrugna...
EUVD-2021-26110
Malware in sbrugna...
EUVD-2012-4596
Malware in sbrugna...
EUVD-2009-3738
Malware in sbrugna...
EUVD-2023-0289
Malicious code in bioql PyPI...
EUVD-2022-0169
Malicious code in bioql PyPI...
CVE-2024-45522
Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password. This occurs in create in apps/web/pages/api/forgot-password/index.ts...
CVE-2023-51663
Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect OIDC email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change...
CVE-2021-39753
In DomainVerificationService, there is a possible way to access app domain verification information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2024-27918
Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in Coder's OIDC authentication could allow an attacker to bypass the CODEROIDCEMAILDOMAIN verification and create an account with an email not in the...
OESA-2024-2420 python3 security update
Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...
Medium: python
Issue Overview: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which...
CVE-2024-9278 HuankeMao SCRM Administrator Backend WxkConfig.php upload_domain_verification_file unrestricted upload
A vulnerability, which was classified as critical, has been found in HuankeMao SCRM up to 0.0.3. Affected by this issue is the function uploaddomainverificationfile of the file WxkConfig.php of the component Administrator Backend. The manipulation of the argument domainverificationfile leads to...
PT-2024-39536 · Unknown · Huankemao Scrm
Name of the Vulnerable Software and Affected Versions: HuankeMao SCRM versions up to 0.0.3 Description: A critical issue has been found in the Administrator Backend component, specifically in the function upload domain verification file of the file WxkConfig.php. The manipulation of the argument...
PT-2024-31679
Name of the Vulnerable Software and Affected Versions: Linen versions prior to cd37c3e Description: The issue occurs when resetting a password, where the domain is not verified to be linen.dev or www.linen.dev. This happens in the create function in apps/web/pages/api/forgot-password/index.ts...
CVE-2024-45522
Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password. This occurs in create in apps/web/pages/api/forgot-password/index.ts...
CVE-2024-45522
CVE-2024-45522 affects Linen ( Linen.dev ) with an improper domain validation in the forgot-password flow. The issue occurs in the endpoint at apps/web/pages/api/forgot-password/index.ts, where the domain is not verified against linen.dev or www.linen.dev during password resets, potentially enabl...