239 matches found
GHSA-3PG4-QWC8-426R OpenRefine leaks Google API credentials in releases
Impact OpenRefine releases contain Google API authentication keys "client id" and "client secret" which can be extracted from released artifacts. For instance, download the package for OpenRefine 3.8.2 on linux. It contains the file...
CVE-2024-47187
creationtimestamp| type| source ---|---|--- 2024-10-16 22:14:54+00:00| seen| https://t.me/cvedetector/8116...
Exploit for CVE-2024-9014
This post is a research article published by EQSTLabhttps://g...
Unauthorized Access
pgAdmin4 is vulnerable to Unauthorized Access. The vulnerability is due to the potential exposure of the client ID and secret, which allows an attacker to gain unauthorized access to user data...
GHSA-JM9X-RX9X-WPQJ OAuth2 client ID and secret exposed through the web browser
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data...
CVE-2024-9014 OAuth2 client id and secret exposed through the web browser in pgAdmin 4
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data...
CVE-2024-9014
pgAdmin 4 (versions ≤ 8.11) is affected by CVE-2024-9014 due to an OAuth2 authentication flaw that can expose OAuth2_CLIENT_ID and OAuth2_CLIENT_SECRET from the login/config, enabling unauthorized access to user data. The Nuclei template confirms an authentication bypass/vector leading to credent...
CVE-2024-9014 OAuth2 client id and secret exposed through the web browser in pgAdmin 4
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data...
PT-2024-6396
Name of the Vulnerable Software and Affected Versions pgAdmin versions 8.11 and earlier Description The issue is related to a security flaw in OAuth2 authentication, allowing an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data. The vulnerability...
PT-2024-38873 · Nafisulbari · Insurance Management System
Name of the Vulnerable Software and Affected Versions: nafisulbari/itsourcecode Insurance Management System version 1.0 Description: A vulnerability was found in the Insurance Management System, affecting some unknown functionality of the file addClient.php. The manipulation of the CLIENT ID...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System version 1.0, which stems from the manipulation of the parameter CLIENT ID in the file addClient.php that can lead to...
itsourcecode Insurance Management System 跨站脚本漏洞
itsourcecode Insurance Management System is an insurance management system from itsourcecode open source. A cross-site scripting vulnerability exists in version 1.0 of itsourcecode Insurance Management System, which stems from an unknown function in the file addNominee.php on the Add Nominee page...
Error "Invalid Client ID/Secret key" throws while configuring Probe Agent for Cloud Monitor
While configuring Citrix Probe Agent for Cloud Monitor it throws error "Invalid Client ID/Secret key" although Client ID, Secret and Customer ID are correct...
XenCenter 2024.2.0 - For Citrix Hypervisor and XenServer
Who Should Install This Update? This XenCenter update is for customers who use XenCenter as the management console for Citrix Hypervisor 8.2 CU1 and XenServer 8. This version of XenCenter supersedes any previous version of XenCenter. It constitutes the following deliverable: File Name|...
CVE-2024-27852
A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages...
CVE-2024-27852
CVE-2024-27852 is a privacy issue in Apple’s MarketplaceKit component affecting iOS/iPadOS prior to 17.5. The root cause is improper client ID handling for alternate app marketplaces, enabling a malicious webpage to cause a script to track users across sites. Official advisories state the issue i...
CVE-2024-27852
A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages...
CVE-2024-27852
A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages...
