Hackerbay
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 23 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 24, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OneUptime: Unauthenticated Workflow Execution via ManualAPI
OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification
OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure
OneUptime: Missing Authentication on Notification Endpoints
OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe
OneUptime: WhatsApp Webhook Missing Signature Verification
OneUptime: ClickHouse SQL Injection via unvalidated column identifiers in sort, select, and groupBy parameters
OneUptime: Password Reset Token Logged at INFO Level
OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose")
OneUptime ClickHouse SQL Injection via Aggregate Query Parameters
Monitor Hackerbay in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.