1546 matches found
CVE-2025-12628: Undefined Security Weakness
The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them...
CVE-2025-8850
In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication 2FA flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend do...
CVE-2025-8850: Expected Behavior Violation
In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication 2FA flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend do...
Insertion of Sensitive 2FA Information in logs and debug command
An Insertion of Sensitive Information into Log File vulnerability CWE-532 in FortiOS may allow an attacker with at least read-only privileges to retrieve sensitive 2FA-related information via observing logs or via diagnose command...
EUVD-2019-7575
Malware in sbrugna...
EUVD-2019-7576
Malware in sbrugna...
EUVD-2019-7578
Malware in sbrugna...
EUVD-2019-7580
Malware in sbrugna...
EUVD-2019-3998
Malware in sbrugna...
EUVD-2021-26485
Malware in sbrugna...
EUVD-2019-0155
Malware in sbrugna...
EUVD-2019-6569
Malware in sbrugna...
EUVD-2019-7577
Malware in sbrugna...
EUVD-2020-0234
Malware in sbrugna...
EUVD-2020-21517
Malware in sbrugna...
EUVD-2019-7579
Malware in sbrugna...
EUVD-2022-47533
Malicious code in bioql PyPI...
EUVD-2023-46382
Malicious code in bioql PyPI...