Pinchtab vulnerabilities
Products
- Pinchtab 7
Newest
- pinchtab PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Token 4.8 Medium
- pinchtab PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution 6.7 Medium
- pinchtab A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution 6.1 Medium
- pinchtab PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems 4.3 Medium
- pinchtab PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl 4.1 Medium
- pinchtab PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation 5.8 Medium
- pinchtab PinchTab: SSRF with Full Response Exfiltration via Download Handler 7.5 High