PT-2026-41170

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.3 Description An application-wide Cross-Site Request Forgery CSRF issue exists in the image uploading functionality. An attacker can set an image URL to a malicious endpoint, causing any authenticated user who...

Deleted Keybase chat images retrievable on Windows, macOS, Linux

By Waqas Keybase is owned by Zoom and currently has almost half a million privacy-focused users. Here's how it kept chat images that were retrievable. This is a post from HackRead.com Read the original post: Deleted Keybase chat images retrievable on Windows, macOS, Linux...

Zomato: Open AWS S3 bucket leaks all Images uploaded to Zomato chat

Hey, Summary: The vulnerable bucket is ████images and we can use aws s3 ls s3://$bucketname/2019/1/ to retreive all images uploaded in 2019 and in January. Similarly we can use different years and months to retreive all images uploaded to Zomato Chat! The images can be accessed at...