Myndr: Myndr CORS Misconfiguration

The CORS configuration on admin.myndr.net allowed any .myndr.net subdomain to read authenticated admin panel responses, including CSRF nonces and session data. This vulnerability could have been exploited to take over admin accounts...

Myndr: CORS Misconfiguration / Broken Access Control

A CORS misconfiguration was discovered on the admin panel that allowed any website hosted on a subdomain of the target organization to read authenticated admin responses, including CSRF nonces and session data. This vulnerability could have enabled full admin account takeover through a CSRF attac...

Malicious code in @myndr/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3076718e34641b734beda559eda4aacb4aa9799c37cc7cdb3f7d110f8255ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...