Search HackerFeeds

OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admi

matched in description · 2026-11-08

OpenIdentityPlatform OpenAM before 16.1.4 contains an open redirect because WS-Federation logout, SAML v2.0 logout and name-identifier management, SAML v2.0 ide

matched in description · 2026-11-08

OpenAM before 16.1.4 contains an open redirect vulnerability that allows attackers to redirect users to external sites because RelayState is unchecked when no r

matched in description · 2026-11-08

OpenAM before 16.1.4 contains an open redirect and cross-site scripting vulnerability that allows remote attackers to control post-login and logout destinations

matched in description · 2026-11-08

OpenAM before 16.1.4 contains an open redirect vulnerability that allows remote attackers to redirect users after SAML 1.x single sign-on by exploiting loose tr

matched in description · 2026-11-08

Vikunja before 2.7.1 contains a stored CSS injection vulnerability that allows authenticated users with project write access to inject arbitrary CSS via unsanit

matched in description · 2026-11-08

Vikunja before 2.7.1 contains a cross-site request forgery vulnerability that allows attackers to import their data into a victim's account because the Todoist,

matched in description · 2026-11-08

clop • NZ

matched in description · 2026-09-23

blacknevas

matched in description · 2026-06-30

blacknevas • TR

matched in description · 2026-06-30

blacknevas • TR

matched in description · 2026-06-30

shadowbyt3$

matched in description · 2026-06-03

shadowbyt3$ • SG

matched in description · 2026-05-14

handala • IL

matched in description · 2024-07-21