CockroachDB Information Disclosure Detection

CockroachDB exposed the Statements Admin UI page and the HTTP endpoint /status/statements in ways that let non-admin users and in some builds, unauthenticated callers see SQL text executed across the cluster. !/usr/bin/env python3 -- coding: utf-8 -- """CockroachDB exposed the Statements Admin UI...

CVE-2006-3521: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index/siteforge-bugs-action/proj.siteforge in SiteForge Collaborative Development Platform 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 status, 2 extra1, 3 extra2, or 4 extra3 parameters...