Все уязвимости

Gitea admin API public-only token scope bypass

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a mali

Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability

Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

Apache Answer: AdminToken not invalidated after admin deactivation

OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation

A security flaw in the '_transfer' function of a smart contract implementation for Money Making Oppo

TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset function

Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator

Page table protection configuration vulnerability in the trusted firmware module Impact: Successful

A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensiti

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to c

Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains va

biscuit-java vulnerable to public key confusion in third party block

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privil

KubePi's JWT token validation has a defect