CVE-2025-13483 Missing Authentication for Critical Function in SiRcom SMART Alert (SiSA)

SiRcom SMART Alert SiSA allows unauthorized access to backend APIs. This allows an unauthenticated attacker to bypass the login screen using browser developer tools, gaining access to restricted parts of the application...

EUVD-2025-199621

SiRcom SMART Alert SiSA allows unauthorized access to backend APIs. This allows an unauthenticated attacker to bypass the login screen using browser developer tools, gaining access to restricted parts of the application...

PT-2025-48047

SiRcom SMART Alert SiSA allows unauthorized access to backend APIs. This allows an unauthenticated attacker to bypass the login screen using browser developer tools, gaining access to restricted parts of the application...

EUVD-2025-30428

Malicious code in bioql PyPI...

EUVD-2025-5941

Malicious code in bioql PyPI...

CVE-2025-24318

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise...

PT-2025-9118 · Dario Health · Dario Application Database/Internet-Based Server Infrastructure

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows observation of the cookie policy via built-in browser tools. In the presence of cross-site scripting XSS, this could potentially lead to full session compromise...

CVE-2024-7259 Ovirt-engine: potential exposure of cleartext provider passwords via web ui

A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext...

Wazuh Security Breach

Wazuh is a Wazuh open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. A security vulnerability exists in Wazuh versions 4.4.0 and 4.4.1 that stems from the ability to obtain a Wazuh AP...

Fortinet FortiClientEms 信息泄露漏洞

Fortinet FortiClientEms is a centralized central management system from Fortinet, Inc. An information disclosure vulnerability exists in Fortinet FortiClientEms, which stems from a lack of encryption of sensitive data in FortiClientEMS. An authenticated attacker could view sensitive information i...

The vulnerability of Google Chrome browser developer tools allows a hacker to compromise data integrity.

The vulnerability of Google Chrome browser developer tools is related to improper control over access to critical resources. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Jira outputs a stack trace to the screen when an error is encountered

panel h3. Problem When users are greeted by the error 500 page, they can click on the Request assistance link to expand and see the long stack trace of the error that occurs. The information is not useful to most of the end users but it's not possible to hide it from them. h3. Suggestion To have ...

Jira outputs a stack trace to the screen when an error is encountered

panel h3. Problem When users are greeted by the error 500 page, they can click on the Request assistance link to expand and see the long stack trace of the error that occurs. The information is not useful to most of the end users but it's not possible to hide it from them. h3. Suggestion To have ...

SWF Opener 1.3 Buffer Overflow

SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl poc.pl xpl.swf In The Stack 0012BBE8 41 41 41 41 41 41 ...