-
Security Risk: Verbose error messages can inadvertently expose sensitive information about the application's internal workings, such as stack traces, database queries, and configuration settings. Atta…
-
1. Vulnerability affects product:onekeyadmin
2. Vulnerability affects version 1.3.9
3. Vulnerability type:file reading
4. Vulnerability Details：
Vulnerability location
Vulnerability occurs in
…
-
```mermaid
journey
title Scores History
section 644d89227cdcf8bf1e91f0e121b0f916a21e84a8
message: 4: agustin-rios
vulnerability: 5: agustin-rios
section 3f1b70b5e50264f0e2ba08dee2a3a0c878fa9d60
mess…
-
Vulnerable Library - litelinks-core-1.7.2.jar
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/io/netty/netty-handler/4.1.74.Final/netty-handler-4.1.74…
-
As the maintainer of the source2adoc CLI tool, I want to implement a proof of concept (PoC) for [fuzz testing](https://en.wikipedia.org/wiki/Fuzzing) to ensure the robustness and reliability of my app…
-
**What happened**:
1. How to prevent duplicate package names: `jinja2` and `Jinja2` ?
2. Maybe we can b…
-
## CVE-2021-28965 - High Severity Vulnerability
Vulnerable Library - rexml-3.2.4.gem
An XML toolkit for Ruby
Library home page: https://rubygems.org/gems/rexml-3.2.4.gem
Dependency Hierarchy:
- …
-
Vulnerable Library - marsdb-0.6.11.tgz
MarsDB is a lightweight client-side MongoDB-like database, Promise based, written in ES6
Library home page: https://registry.npmjs.org/marsdb/-/marsdb-0.6.11.t…
-
Vulnerability: Server Banner Version Disclosure
Description: Application response header is disclosing the nginx version 1.11.12 which should not be disclosed as this may help an attacker to find the…
-
**What happened**:
I get this output:
```
[0000] ERROR failed to fetch latest version: Get "https://toolbox-data.anchore.io/grype/releases/latest/VERSION": dial tcp: lookup toolbox-data.anchore…