2846 matches found
Exploit for Deserialization of Untrusted Data in Facebook React
🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next...
PT-2025-47979
Name of the Vulnerable Software and Affected Versions lunary-ai/lunary version 1.9.34 Description Improper authentication in the Google OAuth integration allows for account takeover. The application fails to verify the aud audience field in the access token issued by Google, which is necessary to...
Memos 安全漏洞
Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos 0.18.1 and prior versions that stems from an access token not being invalidated after a password change, which could lead to continued account...
LY Corporation: page.line.me Open Redirect Leading to OAuth Authorization Code Exposure and Access Token Compromise
An open redirect vulnerability was identified in page.line.me because redirect destinations were not properly restricted to trusted domains. This vulnerability could have been abused within an OAuth 2.0 authorization flow to cause the authorization response to be sent to an attacker-controlled...
Soft Serve does not sanitize ANSI escape sequences in user input
Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...
GHSA-FV2R-R8MP-PG48 Soft Serve does not sanitize ANSI escape sequences in user input
Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...
CVE-2025-9152
An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...
Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
New research has uncovered that publishers of over 100 Visual Studio Code VS Code extensions leaked access tokens that could be exploited by bad actors to update the extensions, posing a critical software supply chain risk. "A leaked VS Code Marketplace or Open VSX PAT personal access token allow...
VulnCheck KEV: CVE-2020-27867
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...
EUVD-2020-0096
Malware in sbrugna...
EUVD-2019-5582
Malware in sbrugna...
EUVD-2019-5583
Malware in sbrugna...
EUVD-2019-4842
Malware in sbrugna...
EUVD-2021-19465
Malware in sbrugna...
EUVD-2016-1977
Malware in sbrugna...
EUVD-2021-27068
Malware in sbrugna...
EUVD-2021-17066
Malware in sbrugna...
EUVD-2019-13615
Malware in sbrugna...