Clario: Account verification bypass on translate.kromtech.com

Account verification bypass on translate.kromtech.com Summary: An account could be registered on translate.kromtech.com but the functionality returns "Access denied or Your user wasn't activated yet. ". But it's implemented in a strange way, every time we make a request that requires user to be...

Clario: CORS Misconfiguration, could lead to disclosure of sensitive information (translate.kromtech.com)

Summary CORS Misconfiguration, could lead to disclosure of sensitive information translate.kromtech.com Steps to reproduce In PoC section we send Origin: http://owmzuoswdxrx.com header and server respond to us with Access-Control-Allow-Origin: http://owmzuoswdxrx.com and...