EEF-CVE-2026-81632 Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix

Summary Use of HTTP Request With Sensitive Query String vulnerability in team-alembic AshAuthenticationPhoenix allows someone able to read access logs, proxy logs or browser history to recover a single-use sign-in token and authenticate as its owner. After a successful password sign-in,...

Unfixed XSS vulnerability at www.powerscripts.info

Security researcher Camilo-TcK, has submitted on 30/10/2008 a cross-site-scripting XSS vulnerability affecting www.powerscripts.info, which at the time of submission ranked 20115038 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It...