Submitted

4 reports sent to a program. Duplicates included — the point is the record, not the score.

• 2026-10-07 · SALTOSYSTEMS-2RN028N1
  Race condition (TOCTOU) on OAuth2 authorization_code redemption: concurrent requests all get 200 informative medium Salto Home Solutions (Intigriti)
• 2026-10-05 · SALTOSYSTEMS-QYI046FH
  Unrestricted refresh-token replay: a stolen refresh_token issues 12-hour access tokens indefinitely dup medium Salto Home Solutions (Intigriti)
• 2026-09-25 · SALTOSYSTEMS-IR7LYOXQ
  Hardcoded Azure App Configuration credentials (incl. PRODUCTION) in public JS and Android app informative high Salto CloudWorks (Intigriti)
• 2026-09-23 · SOCIALDEAL-XP9XFVVQ
  Open redirect (URL parser differential) in POST /login/ and /register/ dup low Social Deal (Intigriti)