1811 matches found
CRMEB 安全漏洞
CRMEB is a Java mall system that is open source by CRMEB. A security vulnerability exists in CRMEB 5.6.1 and earlier versions, which stems from the JWT HMAC Secret Handler component's use of a hard-coded encryption key for the parameter secret, which could lead to a remote attack...
PT-2025-40806
Name of the Vulnerable Software and Affected Versions CRMEB versions prior to 5.6.2 Description A security issue exists in CRMEB related to the JWT HMAC Secret Handler component. Manipulation of the secret argument with the input default leads to the use of a hard-coded cryptographic key within a...
CVE-2025-9485
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
CVE-2025-9485 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
WordPress plugin OAuth Single Sign On – SSO (OAuth Client) 数据伪造问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A data forgery issue...
RockyLinux 10 : opentelemetry-collector (RLSA-2025:7479)
The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2025:7479 advisory. go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...
EUVD-2025-10989
Malicious code in bioql PyPI...
EUVD-2025-24930
Malicious code in bioql PyPI...
EUVD-2024-52316
Malicious code in bioql PyPI...
EUVD-2023-2883
Malicious code in bioql PyPI...
EUVD-2022-5105
Malicious code in bioql PyPI...
EUVD-2024-3127
Malicious code in bioql PyPI...
EUVD-2023-38201
Malicious code in bioql PyPI...
EUVD-2023-29918
Malicious code in bioql PyPI...
EUVD-2025-13907
Malicious code in bioql PyPI...
EUVD-2023-34278
Malicious code in bioql PyPI...
EUVD-2025-29910
Malicious code in bioql PyPI...
EUVD-2021-8681
Malicious code in bioql PyPI...