Skip to content

Overview · activity

Everything that happened

Your team and SecureAssure, newest first. This week, two people worked on findings, and every scan, ticket and ruling is here too.

46 things

Today

4 things

  1. KOYou started a rescan of tessellatepay.comScanNext.js 14.1.0: Server-Side Request Forgery in Server Actions10:19
  2. KOYou merged PR #488 (next 14.2.15) and marked the fix submittedScanNext.js 14.1.0: Server-Side Request Forgery in Server Actions08:52
  3. SecureAssure checked every host for CVE-2026-41187 the morning it was publishedCVE-2026-4118707:05
  4. SecureAssure rescanned your 5 vendors overnightVendors01:00

Yesterday

2 things

  1. KOYou retested this: still exploitableScanNext.js 14.1.0: Server-Side Request Forgery in Server Actions16:42
  2. SecureAssure rescanned your 5 vendors overnightVendors01:00

Fri 16 Oct

2 things

  1. SecureAssure found this on Termii's surfaceVendorJenkins open to the internet01:05
  2. SecureAssure rescanned your 5 vendors overnightVendors01:00

Thu 15 Oct

4 things

  1. SecureAssure found this on the dark webDark webAccess to your VPN is for sale21:14
  2. SecureAssure ran the weekly scan of tessellate.ng. It fell short, so it closed nothingScan of tessellate.ng02:00
  3. SecureAssure found this on SeamlessHR's surfaceVendorPayroll admin login without a second factor01:05
  4. SecureAssure rescanned your 5 vendors overnightVendors01:00

Wed 14 Oct

3 things

  1. CEChidi opened the fix for reviewPentestAny merchant can read another merchant's payouts11:20
  2. SecureAssure found this in tessellate/infraCodeFirewall lets the whole internet reach Grafana on port 300003:00
  3. SecureAssure rescanned your 5 vendors overnightVendors01:00

Tue 13 Oct

5 things

  1. SecureAssure found this on the dark webDark webStaging's database password was published in a paste14:03
  2. SecureAssure found this in tessellate/mobile-apiCodeStack trace returned in an error response03:00
  3. SecureAssure found this on Contabo's surfaceVendorCertificate expired01:05
  4. SecureAssure found this on Contabo's surfaceVendorcPanel login open to the internet01:05
  5. SecureAssure rescanned your 5 vendors overnightVendors01:00

Mon 12 Oct

9 things

  1. SecureAssure found this on the dark webDark web37 of your virtual cards are for sale09:30
  2. KOYou took thisScanNext.js 14.1.0: Server-Side Request Forgery in Server Actions09:12
  3. Jira opened SEC-142ScanNext.js 14.1.0: Server-Side Request Forgery in Server Actions02:21
  4. SecureAssure proved this exploitable on api.tessellatepay.comScanNext.js 14.1.0: Server-Side Request Forgery in Server Actions02:19
  5. SecureAssure found this in the standard scan of tessellatepay.comScanFortiOS 7.0.12, affected by CVE-2024-2176202:00
  6. SecureAssure found this in the standard scan of tessellatepay.comScan.env file open to anyone02:00
  7. SecureAssure found this in the standard scan of tessellatepay.comScanCertificate expires in 18 days02:00
  8. SecureAssure ran the weekly scan of tessellatepay.comScan of tessellatepay.com02:00
  9. SecureAssure rescanned your 5 vendors overnightVendors01:00

Sun 11 Oct

1 thing

  1. SecureAssure rescanned your 5 vendors overnightVendors01:00

Sat 10 Oct

2 things

  1. TMTunde assigned this to ChidiCodeAWS access key committed10:02
  2. SecureAssure rescanned your 5 vendors overnightVendors01:00

Fri 9 Oct

5 things

  1. SecureAssure checked the key with AWS: this's liveCodeAWS access key committed14:21
  2. SecureAssure found this in pull request #482 and blocked the mergeCodeAWS access key committed14:20
  3. SecureAssure found this on the dark webDark webTunde's work logins and a live admin session were stolen04:20
  4. SecureAssure found this in tessellate/payments-apiCodeAWS access key committed03:00
  5. SecureAssure rescanned your 5 vendors overnight; 1 didn't finish and runs again tonightVendors01:00

Thu 8 Oct

4 things

  1. SecureAssure found this on the dark webDark webTwo staff passwords are in a new combo list11:00
  2. SecureAssure found this in the standard scan of tessellate.ngScanLaravel debug mode is on02:00
  3. SecureAssure ran the weekly scan of tessellate.ngScan of tessellate.ng02:00
  4. SecureAssure rescanned your 5 vendors overnightVendors01:00

Wed 7 Oct

1 thing

  1. SecureAssure rescanned your 5 vendors overnightVendors01:00

Tue 6 Oct

1 thing

  1. SecureAssure rescanned your 5 vendors overnightVendors01:00

Mon 5 Oct

3 things

  1. SecureAssure found this in the standard scan of tessellatepay.comScanSubdomain can be taken over02:00
  2. SecureAssure ran the weekly scan of tessellatepay.comScan of tessellatepay.com02:00
  3. SecureAssure rescanned your 5 vendors overnightVendors01:00
66 more from before the last two weeks