AttackFeed by Joe Wagner | Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS)  - Full Disclosure

Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS)  – Full Disclosure

Posted on By Joe-W No Comments on Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS)  – Full Disclosure
Alert Feeds

 

Posted by Christopher Dickinson via Fulldisclosure on Oct 13

Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com

CVE Identifiers

* CVE-2025-[PENDING] – Excessive Data Exposure / JWT Token Leakage
* CVE-2025-[PENDING] – Broken Object Level Authorization (IDOR)
* CVE-2025-[PENDING] – Unrestricted Resource Consumption (DoS)

Executive Summary
This security advisory details three significant vulnerabilities discovered in the Suno.com web application and API
infrastructure on October 9,…
 – Read More  – Full Disclosure 

You may also like

Alert Feeds
SEC Consult SA-20250923-0 :: Missing Certificate Validation leading to RCE in CleverControl employee monitoring software #CVE-2025-10548  – Full Disclosure
September 25, 2025
Alert Feeds
APPLE-SA-09-15-2025-11 Safari 26  – Full Disclosure
September 16, 2025
Alert Feeds
apis.google.com – Insecure redirect via __lu parameter (exploited in the wild)  – Full Disclosure
October 18, 2025
Alert Feeds
[KIS-2025-04] SugarCRM <= 14.0.0 (css/preview) LESS Code Injection Vulnerability  – Full Disclosure
July 29, 2025

Leave a Reply

AttackFeed by Joe Wagner
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.