364 matches found
EUVD-2023-33591
Malicious code in bioql PyPI...
EUVD-2025-23602
Malicious code in bioql PyPI...
EUVD-2025-28085
Malicious code in bioql PyPI...
EUVD-2025-7131
Malicious code in bioql PyPI...
EUVD-2024-51453
Malicious code in bioql PyPI...
EUVD-2025-19092
Malicious code in bioql PyPI...
EUVD-2022-30947
Malicious code in bioql PyPI...
π Trivision NC-227WF Username Enumeration
Trivision NC-227WF with firmware version 5.80 build 0141010 has a login mechanism that reveals whether a username exists or not by returning different error messages. CVE-2025-56764 β Trivision NC-227WF Summary Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a...
CVE-2025-54725
Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo golo allows Authentication Abuse.This issue affects Golo: from n/a through = 1.7.0...
CVE-2025-54738
Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster noo-jobmonster allows Authentication Abuse.This issue affects Jobmonster: from n/a through = 4.7.9...
CVE-2025-54725
Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo golo allows Authentication Abuse.This issue affects Golo: from n/a through = 1.7.0...
CVE-2025-54738
CVE-2025-54738 describes an authentication bypass in the WordPress plugin/theme NooTheme Jobmonster (WordPress JobMonster). The vulnerability allows authentication abuse via an alternate path or channel, affecting Jobmonster versions from n/a up to and including 4.7.9. Evidence from multiple sour...
CVE-2025-54738 WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster noo-jobmonster allows Authentication Abuse.This issue affects Jobmonster: from n/a through = 4.7.9...
CVE-2025-54725
CVE-2025-54725 affects WordPress theme/plugin Golo (WordPress Golo Theme) up to version 1.7.0. The issue is a broken/authentication bypass allowing authentication abuse via an alternate path or channel in uxper Golo, enabling unauthenticated users to bypass login controls. The CVSS v3.1 base scor...
CVE-2025-54725 WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo allows Authentication Abuse. This issue affects Golo: from n/a through 1.7.0...
PT-2025-35077
Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.7.9 Description: An Authentication Bypass Using an Alternate Path or Channel vulnerability exists in NooTheme Jobmonster, allowing Authentication Abuse. Recommendations: Update NooTheme Jobmonster to a...
PT-2025-34021 Β· WordPress Β· Taxi Booking Manager For Woocommerce
Name of the Vulnerable Software and Affected Versions: Taxi Booking Manager for WooCommerce versions through 1.3.0 Description: An authentication bypass vulnerability exists due to an alternate path or channel, allowing authentication abuse. Recommendations: At the moment, there is no information...
CVE-2025-9004 mtons mblog password excessive authentication
A vulnerability was found in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /settings/password. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be initiated remotely. The complexity of an attack is rather high. T...
CVE-2025-54982
An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...
CVE-2025-54982 SAML 2.0 Public Key Validation Issue
An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...