← All credits

Eldor Nabijonov

5 vulnerability records and advisories credit this contributor.

changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement

changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema

shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotion

changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force

Plainpad Missing Rate Limiting via POST /v1/sessions