meetinthemiddle-be

Use of PKCE is recommended in 0x04e, but there appears to be no testcase for verifying if it's in place

7

**Platform:** Both **Description:** When using the OAuth2 authorization code flow, code interception attacks are possible, which can be mitigated through implementing PKCE. A testcase for verifying the proper working of...

False Positive report on DOM-based XSS

15

**Describe the bug** DOM based XSS vulnerabilities are raised which are not reproducible in a browser, despite having confidentiality "High". ``` http://localhost:8181/#jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert(5397) )//%0D%0A%0d%0a//

adb doesn't work

2

**Describe the bug** "adb" does not work, even after setting up Android Studio **To Reproduce** Steps to reproduce the behavior: 1. Run the mobilehacktools installer (at least for android) 2....

### PsychoPy Version 2024.2.2 ### What OS are your PsychoPy running on? Windows 10 ### Bug Description When creating a loop and importing a conditions file with duplicate columns, the...

Requirement to detect account theft lacking notification of e-mail address or phone number change.

11

Weakness: An attacker who has control over a user's session can permanently lock the user out without their knowledge due to the e-mail / phone number change process not notifying...