CWE-1230: CWE-1230

This vulnerability in lunary-ai/lunary exposes both public and private API keys through the GET /projects endpoint to users with minimal permissions l...

The groov View API users endpoint exposes API keys for all users, including administrators, to anyone with Editor role access. This allows privilege e...

This vulnerability in berriai/litellm's proxy server leaks Langfuse API keys when team settings parsing fails, exposing sensitive credentials. Attacke...

Dell NativeEdge version 2.1.0.0 contains a metadata exposure vulnerability that allows unauthenticated remote attackers to access sensitive informatio...

This vulnerability allows attackers to obtain expired administrator authentication tokens from network devices that have timed out from ETM (Embedded ...

An information disclosure vulnerability in transformeroptimus/superagi allows authenticated users to access sensitive configuration details of any org...

This vulnerability in Google Chrome's Media Stream implementation allows a remote attacker to gather information about connected peripherals (like web...

The RomethemeKit For Elementor WordPress plugin exposes sensitive template data through a vulnerability in the register_controls function. Authenticat...

The HT Mega plugin for WordPress exposes sensitive template data through a vulnerability in the accordion widget. Authenticated attackers with Contrib...