2339 matches found
PT-2025-47979
Name of the Vulnerable Software and Affected Versions lunary-ai/lunary version 1.9.34 Description Improper authentication in the Google OAuth integration allows for account takeover. The application fails to verify the aud audience field in the access token issued by Google, which is necessary to...
Memos 安全漏洞
Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos 0.18.1 and prior versions that stems from an access token not being invalidated after a password change, which could lead to continued account...
LY Corporation: page.line.me Open Redirect Leading to OAuth Authorization Code Exposure and Access Token Compromise
An open redirect vulnerability was identified in page.line.me because redirect destinations were not properly restricted to trusted domains. This vulnerability could have been abused within an OAuth 2.0 authorization flow to cause the authorization response to be sent to an attacker-controlled...
Soft Serve does not sanitize ANSI escape sequences in user input
Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...
GHSA-FV2R-R8MP-PG48 Soft Serve does not sanitize ANSI escape sequences in user input
Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...
CVE-2025-9152
An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...
VulnCheck KEV: CVE-2020-27867
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...
EUVD-2019-13429
Malware in sbrugna...
EUVD-2021-27068
Malware in sbrugna...
EUVD-2019-5581
Malware in sbrugna...
EUVD-2020-12589
Malware in sbrugna...
EUVD-2020-26583
Malware in sbrugna...
EUVD-2020-18482
Malware in sbrugna...
EUVD-2013-4316
Malware in sbrugna...
EUVD-2019-11426
Malware in sbrugna...
EUVD-2018-9206
Malware in sbrugna...
EUVD-2021-13796
Malware in sbrugna...
EUVD-2020-18698
Malware in sbrugna...