Jeroen Pinoy

Cross-Site Request Forgery in the Administrative User Deletion Endpoint

Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

Stored DOM-Based Cross-Site Scripting in Node Modal Headers

DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons

Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding

DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

Open Redirect in MISP Installer-Generated Apache Configuration

Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References

Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests