Secur0 CNA

IDOR in Prospero Flow CRM Order API allows cross-tenant read and modification of orders

Missing authorization in Prospero Flow CRM allows low-privileged users to read all bank accounts

Authorization bypass in Prospero Flow CRM Excel import allows cross-tenant record injection

Authorization Bypass Through User-Controlled Key in Prospero Flow CRM calendar event deletion

Unauthenticated self-registration in MailerUp allows access to stored email data

Lack of input validation in Mailerup input parameter leads to Open Redirect

SSRF in Pentestify PDF generation endpoint via Host header