CVE-2025-63216

The Itel DAB Gateway IDGat build c041640a is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...

CVE-2025-56643

Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a toke...

CVE-2025-13246

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...

CVE-2025-13246 shsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversal

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...

PT-2025-47081

Name of the Vulnerable Software and Affected Versions shsuishang ShopSuite ModulithShop versions prior to 45a99398cec3b7ad7ff9383694f0b53339f2d35a Description A path traversal issue exists in shsuishang ShopSuite ModulithShop. The JwtAuthenticationFilter function within the...

EUVD-2025-180187

Malicious code in await-jwt-vuetify-event npm...

Malicious code in cressida-jwt-loglevel-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c579391a28b717cc3bab01d83cefe0a9573ccb0c4b8dee4c27e98fcb9b1adac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-jwt-vuetify-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd21812b96907664c208aee1e22aaf7d46e2eaf9437d6f4a0c8a6f0731f689fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175543

Malicious code in winston-jwt-vuepress-prettier npm...

EUVD-2025-179513

Malicious code in cressida-jwt-loglevel-fetch npm...

EUVD-2025-175927

Malicious code in toml-jwt-docusaurus-celeste npm...

EUVD-2025-178233

Malicious code in jwt-rest-jest-pm2 npm...

EUVD-2025-178235

Malicious code in jwt-mutation-dagda-octans npm...

EUVD-2025-178068

Malicious code in lint-staged-javascript-jwt-zooarchaeology npm...

EUVD-2025-178017

Malicious code in loop-mysql-jwt-jekyll npm...

Malicious code in lithosphere-buffer-jwt-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969f5c74780f468d81215b74596c5c5ed356350b8fc25c5ef462e9ee0fe85b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175741

Malicious code in vega-panspermia-jwt-gemini npm...

EUVD-2025-176911

Malicious code in publish-zephyr-tethys-jwt npm...

EUVD-2025-178768

Malicious code in ganymede-tethys-jwt-halley npm...

Malicious code in airbnb-nconf-redis-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a83a2aeb7ed757c3f88c29533b1f99f98b6f8c7bbe9e48c1143c76a979ebf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...