Tag: credentialExposure

  • Vulnerability Watch No38

    Critical SQL Injection Hits Travel Agency Management System • ASUS Utility Flaw Can Enable Local Privilege Escalation • Hard-Coded Key Puts SAP BusinessObjects Credentials at Risk • SAP ABAP Authorization Flaw Exposes Database Operations • SAP Approuter Token Validation Flaw Can Leak Credentials…

  • Vulnerability Watch No23

    Hashi Vault JS Flaw Enables Path and Query Injection • Defaults Deep Library Vulnerable to Prototype Pollution • DSSRF DNS Handling Bug Reopens SSRF Paths • Vault Webhook Flaw Can Leak Kubernetes Service Account Tokens • cPanel Database Rename Flaw Enables Root-Context SQL Execution…

  • Vulnerability Watch No20

    TinyWeb Path Traversal Exposes Sensitive Server Files • Malformed Requests Can Crash TinyWeb Servers • Ordinary Requests Can Exhaust TinyWeb Memory • Rouille Request Smuggling Can Bypass Access Controls • QTI Neon Relay Amplification Threatens Game Hosts…

  • Vulnerability Watch No13

    Critical Joomla Easy Store SQL Injection Exposes Databases • Joomla Easy Store Flaw Reveals Other Customers Orders • Joomla Easy Store Payment Forgery Bug Enables Order Manipulation • Proxygen HTTP2 Bug Can Trigger Memory Exhaustion DoS • CyberPanel Backup IDOR Lets Users Access Other Tenants…

  • Vulnerability Watch No3

    Netty STOMP Header Flood Can Crash Servers • Hard-Coded Credentials Found in IBM Langflow OSS • IBM Langflow File Boundary Bypass Exposes User Data • Path Traversal Enables Arbitrary File Writes in Langflow • Langflow Privilege Escalation Can Fully Compromise Service…