CVE-2025-63784

An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook web application 0.2.32. The vulnerability occurs because the application trusts the X-Forwarded-Host header value without proper validation when constructing...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Boldgrid W3_Total_Cache

CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability...

CVE-2025-63784

Onlook web application 0.2.32 contains an Open Redirect vulnerability in the OAuth callback handler (file onlook/apps/web/client/src/app/auth/callback/route.ts). The issue arises from trusting the X-Forwarded-Host header without proper validation when constructing the redirect URL, enabling an at...

CVE-2025-63784

An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook web application 0.2.32. The vulnerability occurs because the application trusts the X-Forwarded-Host header value without proper validation when constructing...

CVE-2025-12139

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "getlocalizedata" function. This makes it possible for unauthenticated attackers to extract sensitive...

Zero Trust Security Model Implementation in Microservices Architectures Using Identity Federation

The microservice bombshells that have been linked with the microservice expansion have altered the application architectures, offered agility and scalability in terms of complexity in security trade-offs. Feeble legacy-based perimeter-based policies are unable to offer safeguard to distributed...

CVE-2025-12139

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "getlocalizedata" function. This makes it possible for unauthenticated attackers to extract sensitive...

CVE-2025-12139 File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "getlocalizedata" function. This makes it possible for unauthenticated attackers to extract sensitive...

WordPress plugin integrate-google-drive 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin integrate-google-drive has an information disclosure vulnerability, the...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: govulncheck, yunikorn-web, ctop, mkcert, litefs, kubernetes-csi-external-attacher, prometheus-adapter, wireguard-go, azure-workload-identity-webhook, prometheus-pushgateway, thanos-operator, capslock, mockery, fulcio, timescaledb-parallel-copy, sonobuoy, slsa-verifie...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, kuberlr, velero-plugin-for-aws, spqr,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...