Lucene search
+L

5 matches found

Vulnrichment
Vulnrichment
•added 2026/03/07 3:19 p.m.•4 views

CVE-2026-29779 UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS5.7AI score0.00471EPSS
SaveExploits0References3
OSV
OSV
•added 2026/03/07 3:19 p.m.•14 views

CVE-2026-29779 UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS5.7AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/07 12:00 a.m.•1 views

CVE-2026-29779: Exposure of Sensitive Information to an Unauthorized Actor

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS5.7AI score0.00471EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/14 11:38 p.m.•24 views

CVE-2025-64308 Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...

7.1CVSS0.00214EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/11/14 11:38 p.m.•7 views

CVE-2025-64308 Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...

7.1CVSS5.8AI score0.00214EPSS
SaveExploits0References3
Rows per page
Query Builder