GHSA-CRMM-HGP2-WGRP Laravel Framework: Temporary Signed URL Path Confusion

A vulnerability in Laravel's local filesystem driver allows temporary signed URLs to be parsed ambiguously, potentially misrouting requests and bypassing expiration enforcement. Under certain conditions, a generated temporary signed URL can be interpreted differently by the server than intended a...

Password Pusher Session Duration

The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access and disclose the protected information...

Password Pusher Improper Session Management

The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to improper session management. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to the system...

Password Pusher Weak Password Brute Force

The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to weak password requirements. Exploiting this vulnerability can allow a remote attacker to carry out a brute-force attack...

PT-2024-41024 · Unknown · Password Pusher

Name of the Vulnerable Software and Affected Versions: Password Pusher affected versions not specified Description: The issue is related to incorrect session expiration limitation in the Password Pusher web service, which allows information to be transmitted via temporary links. This could enable...

Google Chrome Address Bar Spoofing Vulnerability

Google Chrome is a web browsing tool developed by Google. Google Chrome suffers from an address bar spoofing vulnerability. Allows an attacker to spoof the address bar via a vector of temporary URLs involving an initially empty document...