181 matches found
EUVD-2025-131903
Tenda AC15 v15.03.05.18multi issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to acce...
PT-2025-46661
Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.18 multi Description The authentication cookie used by the device exposes the account password hash to the client and utilizes a short, low-entropy suffix as the session identifier. An attacker with network access o...
Tenda AC15 security vulnerabilities
Tenda AC15 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC15 version v15.03.05.18multi, which stems from an authentication cookie that exposes a password hash and uses a low entropy session identifier, which could lead to session hijacking...
CVE-2025-12485
Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticated user to impersonate another account by replaying the pre-MFA cookie.This does not bypass the target account MFA verification step. This issue affects the following versions :...
PT-2025-45338
Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.2.15.0 through 2025.3.5.0 Description A flaw exists in Devolutions Server related to improper privilege management during the handling of pre-MFA cookies. A low-privileged authenticated user can potentially...
CVE-2025-27223
TRUfusion Enterprise versions through 7.10.4.0 are vulnerable to an authentication bypass due to a hard-coded cryptographic key used to create encrypted cookies. This flaw allows attackers to forge session cookies and gain unauthorized access to sensitive internal information, specifically affect...
EUVD-2005-0745
Malware in sbrugna...
EUVD-2007-4402
Malware in sbrugna...
EUVD-2020-7753
Malware in sbrugna...
EUVD-2014-9075
Malware in sbrugna...
EUVD-2017-13085
Malware in sbrugna...
EUVD-2019-4699
Malware in sbrugna...
EUVD-2021-28234
Malicious code in bioql PyPI...
EUVD-2025-7643
Malicious code in bioql PyPI...
EUVD-2022-4170
Malicious code in bioql PyPI...
EUVD-2023-53260
Malicious code in bioql PyPI...
EUVD-2022-0131
Malicious code in bioql PyPI...
EUVD-2024-1853
Malicious code in bioql PyPI...