Lucene search
K

4 matches found

OSV
OSV
added 2026/03/07 3:19 p.m.2 views

CVE-2026-29779 UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS5.7AI score0.00043EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/07 3:19 p.m.0 views

CVE-2026-29779 UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS5.7AI score0.00043EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/14 11:38 p.m.6 views

CVE-2025-64308 Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle...

8.7CVSS0.0004EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/14 11:38 p.m.2 views

CVE-2025-64308 Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle...

8.7CVSS6.5AI score0.0004EPSS
Exploits0References3
Rows per page
Query Builder