EUVD-2025-32012

Malicious code in bioql PyPI...

EUVD-2025-32014

Malicious code in bioql PyPI...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59685: Undefined Security Weakness

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59686: Improper Authorization

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

PT-2025-40252

Name of the Vulnerable Software and Affected Versions Kazaar version 1.25.12 Description The software allows calls to /api/v1/org-id/orders/order-id/documents with a modified order-id. This could potentially lead to unauthorized access or manipulation of data. Recommendations Apply any available...

Kazaar 安全漏洞

Kazaar is a print marketing fulfillment platform from Kazaar, Inc. A security vulnerability exists in Kazaar version 1.25.12 that stems from allowing the use of a JWT with an alg field of none, which could lead to authentication bypass...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

PT-2025-40251

Name of the Vulnerable Software and Affected Versions Kazaar version 1.25.12 Description The software allows a JSON Web Token JWT with 'none' specified in the 'alg' field. This can potentially compromise the integrity of the authentication process. Recommendations At the moment, there is no...

CVE-2025-59686

Kazaar version 1.25.12 is vulnerable to an Insecure Direct Object Reference (IDOR) flaw (CWE-285) involving the /api/v1/org-id/orders/order-id/documents endpoint. The software fails to properly validate the order-id parameter, potentially allowing an attacker to perform unauthorized access or man...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59685

Kazaar version 1.25.12 , a print marketing fulfillment platform, is vulnerable to an authentication bypass. The software incorrectly allows the use of a JSON Web Token (JWT) where the alg field is set to none . This flaw compromises the integrity of the authentication process. No information rega...