Fernando Takagi

2 exploits Active since Jul 2022

CVE-2022-2306 WRITEUP HIGH WRITEUP

Old Session Tokens - Info Disclosure

Old session tokens can be used to authenticate to the application and send authenticated requests.

CVSS 7.5

View Code

CVE-2022-2321 WRITEUP CRITICAL WRITEUP

GitHub heroiclabs/nakama <3.13.0 - Auth Bypass

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.

CVSS 9.8

View Code