CVE-2025-61115

ABC Fine Wine & Spirits Android App version v.11.27.5 and before package name com.cta.abcfinewineandspirits, developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication,...

CVE-2025-61115

The ABC Fine Wine & Spirits Android App (package name com.cta.abcfinewineandspirits), developed by ABC Liquors, Inc., is vulnerable to an improper access control flaw in its login mechanism affecting version v.11.27.5 and before . The root cause is a failure to properly validate user passwords du...

Movary 输入验证错误漏洞

Movary is a movie review program by Lee Peuker Personal Developer. An input validation error vulnerability exists in Movary versions prior to 0.69.0, which stems from the login page not validating the redirection parameter, which could lead to a redirection attack...

CVE-2025-61115

ABC Fine Wine & Spirits Android App version v.11.27.5 and before package name com.cta.abcfinewineandspirits, developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication,...

CVE-2025-61120

AG Life Logger Android App version v1.0.2.72 and before package name com.donki.healthy, developed by IO FIT, K.K., contains improper access control vulnerabilities. Exposed credentials in traffic may allow attackers to misuse cloud resources, and predictable verification codes make brute-force...

Drupal Access code 安全漏洞

Drupal Access code is a Drupal module in the Drupal community. A security vulnerability exists in Drupal Access code versions prior to 2.0.5, which stems from an unrestricted number of authentication attempts that could lead to a brute force attack...

ABC Fine Wine & Spirits Android App 安全漏洞

ABC Fine Wine & Spirits Android App is a wine shopping app by ABC Fine Wine & Spirits. A security vulnerability exists in ABC Fine Wine & Spirits Android App v.11.27.5 and earlier versions, which stems from improper access control of the login mechanism and could lead to bypassing login checks an...

CVE-2025-61115: Improper Access Control

ABC Fine Wine & Spirits Android App version v.11.27.5 and before package name com.cta.abcfinewineandspirits, developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication,...

CVE-2024-13993: Improper Neutralization of Input During Web Page Generation

Nagios XI versions prior to 2024R1.1.2 are vulnerable to a reflected cross-site scripting XSS via the login page when accessed with older web browsers. Insufficient validation or escaping of user-supplied input reflected by the login page can allow an attacker to craft a malicious link that, when...

EUVD-2025-36755

Malicious code in xo-login-components npm...

Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview xo-login-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-49068 Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36758

Malicious code in artifactregistry-login npm...

Malicious code in artifactregistry-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd347194b3db170de6eee9d04102cfda66c40fb1276cc13c04cbdb81db0b33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview artifactregistry-login is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2025-48985 Malicious code in artifactregistry-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd347194b3db170de6eee9d04102cfda66c40fb1276cc13c04cbdb81db0b33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zitadel May Bypass Second Authentication Factor

Summary A vulnerability in Zitadel's token verification prematurely marked sessions as authenticated when only one factor was verified. Impact Zitadel provides an API for managing sessions, enabling custom login experiences in a dedicated UI or direct integration into applications. Session Tokens...

EUVD-2025-36696

Zitadel May Bypass Second Authentication Factor...

CKAN vulnerable to fixed session IDs

Impact Session ids could be fixed by an attacker if the site is configured with server-side session storage CKAN uses cookie-based session storage by default. The attacker would need to either set a cookie on the victim's browser or steal the victim's currently valid session. Session identifiers...