CVE-2026-88795: Improper Control of Generation of Code

The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the tok...

EUVD-2016-1317

Malware in sbrugna...

CVE-2025-47730

The TeleMessage archiving backend through 2025-05-05 accepts API calls to request an authentication token from the TM SGNL aka Archive Signal app with the credentials of logfile for the user and enRR8UVVywXYbFkqUQDPRkO for the password...

PT-2016-3229

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 5.0.x through 5.0.16 Splunk Enterprise versions 6.0.x through 6.0.12 Splunk Enterprise versions 6.1.x through 6.1.11 Splunk Enterprise versions 6.2.x through 6.2.11 Splunk Enterprise versions 6.3.x through 6.3.7 Splu...