EUVD-2024-2059

Malicious code in bioql PyPI...

CVE-2024-38361

SpiceDB (spicedb) vulnerability CVE-2024-38361 affects the permission-check flow: an exclusion under an arrow with multiple resources may cause a NO_PERMISSION response when PERMISSION is expected on CheckPermission, due to a failure in the exclusion dispatcher to query all folders a user can acc...

Spicedb Security Vulnerabilities

SpiceDB is a fine-grained permissions database from the Authzed team. A security vulnerability exists in versions of Spicedb prior to v1.33.1, which stems from the fact that if a resource exists under multiple folders and a user is authorized to view multiple folders, SpiceDB may report that the...

Valve: Reflected XSS in www.dota2.com

Hi guys, Description I found another XSS in www.dota2.com. This time it is located in http://www.dota2.com/international/live/5/5/1. However it seems that when you can change the /5/5 folders to any other number to confirm and it still worked. I tested this on...