2138 matches found
Better Auth: Unauthenticated API key creation through api-key plugin
Summary A critical authentication bypass was identified in the API key creation and update endpoints. An attacker could create or modify API keys for arbitrary users by supplying a victim’s user ID in the request body. Due to a flaw in how the authenticated user was derived, the endpoints could...
PT-2025-41497
Name of the Vulnerable Software and Affected Versions Better Auth versions prior to 1.3.26 Description Better Auth is an authentication and authorization library for TypeScript. A critical authentication bypass allows unauthenticated attackers to create or modify API keys for any user. This is...
EUVD-2018-0717
Malware in sbrugna...
EUVD-2019-0811
Malware in sbrugna...
EUVD-2019-8606
Malware in sbrugna...
EUVD-2009-1086
Malware in sbrugna...
EUVD-2021-12404
Malware in sbrugna...
EUVD-2017-0111
Malware in sbrugna...
EUVD-2017-0198
Malware in sbrugna...
EUVD-2021-0889
Malware in sbrugna...
EUVD-2021-13993
Malware in sbrugna...
EUVD-2017-6286
Malware in sbrugna...
EUVD-2020-3201
Malware in sbrugna...
EUVD-2021-18696
Malware in sbrugna...
EUVD-2021-26971
Malware in sbrugna...
EUVD-2017-16961
Malware in sbrugna...
EUVD-2021-23979
Malware in sbrugna...
EUVD-2020-24513
Malware in sbrugna...