PT-2026-46878

OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on .openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functions, allowing access to browser history information and the ability to open or close tabs. OpenAI...

CVE-2023-31287

An issue was discovered in Serenity Serene and StartSharp before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the...

EUVD-2016-0163

Malware in sbrugna...

Soar Cloud HR Portal Authorization Issues Vulnerability

Soar Cloud HR Portal is a human resources application from Soar Cloud, Inc. Soar Cloud HR Portal suffers from an authorization issue vulnerability that stems from a weak password recovery mechanism for forgotten passwords, where an attacker with access to the browser history or with the line coul...

Default credentials

An issue was discovered in Serenity Serene and StartSharp before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the...

The vulnerability of Safari browser and iOS operating system allows a hacker to gain access to the browser history.

The vulnerability of the Safari browser and iOS operating system’s CSS component implementation lies in the lack of protection for application data. Exploiting this vulnerability can allow a malicious actor to gain access to the browser history through a specially crafted web page...