3827 matches found
CVE-1999-0497
Anonymous FTP is enabled...
SUSE CVE-2025-4123
A cross-site scripting XSS vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permission...
Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin
A cross-site scripting XSS vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permission...
For Tech Whistleblowers, There’s Safety in Numbers
Amber Scorah and Psst are building a “digital safe” to help people shine a light on the bad things their bosses are doing, without getting found out...
grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect
A flaw was found in Grafana's custom frontend plugin handling. This vulnerability allows an attacker to perform a cross-site scripting XSS attack by exploiting a client path traversal and an open redirect issue, leading to arbitrary JavaScript execution and potential user redirection to malicious...
grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect
A flaw was found in Grafana's custom frontend plugin handling. This vulnerability allows an attacker to perform a cross-site scripting XSS attack by exploiting a client path traversal and an open redirect issue, leading to arbitrary JavaScript execution and potential user redirection to malicious...
Lara: Lightweight Anonymous Authentication with Asynchronous Revocation Auditability
Anonymous authentication is a technique that allows to combine access control with privacy preservation. Typically, clients use different pseudonyms for each access, hindering providers from correlating their activities. To perform the revocation of pseudonyms in a privacy preserving manner is...
Anonymous Hackers Steal Flight Data from US Deportation Airline GlobalX
A hacker group claiming affiliation with Anonymous says it breached GlobalX Airlines, leaking sensitive flight and passenger data…...
Remove the Send anonymous usage statistics options at preferences at Storefront
To remove the option of sending anonymous usage statistics to improve Citrix Workspace app at preferences for Stores...
Moodle Information Disclosure Vulnerability
Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an information disclosure vulnerability that stems from the fact that anonymous assignment submissions can...
CVE-2023-45721
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-45721
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-45721
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
CVE-2023-45721
CVE-2023-45721 concerns HCL Leap (and related references note HCL Domino Leap) with insufficient default configuration that permits anonymous access to directory information. Connected sources corroborate the issue in HCL Leap, describe it as a disclosure of private information due to misconfigur...
CVE-2023-45721 HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from an inadequate default configuration that could lead to anonymous access to directory information...
PT-2025-18335 · Hcl · Hcl Leap
Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to insufficient default configuration in HCL Leap, which allows anonymous access to directory information. Recommendations: At the moment, there is no information abou...
Security of a Secret Sharing Protocol on the Qline
Secret sharing is a fundamental primitive in cryptography, and it can be achieved even with perfect security. However, the distribution of shares requires computational assumptions, which can compromise the overall security of the protocol. While traditional Quantum Key Distribution QKD can...
CVE-2023-45720
Insufficient default configuration in HCL Leap allows anonymous access to directory information...
Moodle reveals student identities through assignment submissions search on anonymous submissions
A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities...