CVE-2024-10267

The CVE-2024-10267 entry concerns transformeroptimus/superagi with an information-disclosure bug in the user registration endpoint. An attacker can leak sensitive user data (names, emails, and passwords) by attempting to register with an email already in use, causing the server to return all info...

Improper Authentication

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Improper Authentication due to missing restrictions to create accounts using the same email address, allowing an attacker to escalate privileges or take over accounts by registering...

Use of a Broken or Risky Cryptographic Algorithm in anonaddy/anonaddy

Description MD5 and SHA-1 are popular cryptographic hash algorithms often used to verify the integrity of messages and other data. Recent advances in cryptanalysis have discovered weaknesses in both algorithms. Consequently, MD5 and SHA-1 should no longer be relied upon to verify the authenticity...