issues Search Results · language:Dune language:Python language:JavaScript is:public language:Java language:Java
Filter by
55M results
Target artifact
GET / code (e.g. /3)
Attack class
idor-authz
Discovery method
black-box (interface only)
Property violated
P1: Confidentiality
Steps to reproduce
1. Start the app per START_APP.md ...
Luna-Xue
Target artifact
POST /shorten → GET / code
Attack class
open-redirect
Discovery method
black-box (interface only)
Property violated
P5: Authorization output safety
Steps to reproduce
1. Start ...
Target artifact
GET /api/quizzes
Attack class
idor-authz
Discovery method
black-box (interface only)
Property violated
P5: Authorization output safety
Steps to reproduce
1. Start the app per ...
Target artifact
GET /api/search?q=
Attack class
sql-injection
Discovery method
white-box → reproduced over HTTP
Property violated
P1: Confidentiality
Steps to reproduce
1. Start the app per START_APP.md ...
Target artifact
GET /api/quizzes/2 (also /quiz/2, /quiz/2/submit)
Attack class
idor-authz
Discovery method
black-box (interface only)
Property violated
P1: Confidentiality
Steps to reproduce
1. ...
details summary img src= https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png width=19
height=20 Vulnerable Library - b keras-3.12.2-py3-none-any.whl /b /summary
p Multi-backend ...
Mend: dependency security vulnerability
mend-for-github-com[bot]
Target artifact
GET /drawing/ id
Attack class
idor-authz
Discovery method
black-box (interface only)
Property violated
P1: Confidentiality
Steps to reproduce
1. Start the app per START_APP.md ...
Target artifact
Flask session cookie → GET /drawing/1
Attack class
idor-authz (weak-crypto / session forgery)
Discovery method
white-box → reproduced over HTTP
Property violated
P1: Confidentiality ...
Target artifact
POST /task/ id /toggle
Attack class
open-redirect
Discovery method
white-box → reproduced over HTTP
Property violated
P5: Authorization output safety
Steps to reproduce
1. Start ...
Summary
ExaWebSearchDriver sends a use_autoprompt field in its API request body. The Exa API has removed support for this
parameter and now returns an error, making the driver completely non-functional. ...
shhlife
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.