5230 matches found
EUVD-2025-32436
A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...
CVE-2025-11273
CVE-2025-11273 affects LaChatterie Verger up to 1.2.10. The vulnerability is in the function redirectToAuthorization of /src/main/services/mcp/oauth/provider.ts, where manipulating the URL argument enables a deserialization attack. Based on connected documents, the issue can be exploited remotely...
CVE-2025-11273 LaChatterie Verger provider.ts redirectToAuthorization deserialization
A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...
EUVD-2025-32420
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
CVE-2025-9485
CVE-2025-9485 is an authentication-bypass flaw in the WordPress plugin “OAuth Single Sign On – SSO (OAuth Client)” up to v6.26.12. The root cause is improper verification of cryptographic signatures due to unsafe JWT handling in get_resource_owner_from_id_token, enabling unauthenticated attackers...
CVE-2025-9485 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
CVE-2025-10746 Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization
The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9. This is due to missing capability checks and nonce verification on functions hooked to 'init'. This makes it possible for unauthenticated attackers to deactivate t...
PT-2025-40621
Name of the Vulnerable Software and Affected Versions OAuth Single Sign On – SSO OAuth Client plugin for WordPress versions up to and including 6.26.12 Description The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is susceptible to improper verification of cryptographic signatures...
PT-2025-40614
Name of the Vulnerable Software and Affected Versions Integrate Dynamics 365 CRM plugin for WordPress versions through 1.0.9 Description The Integrate Dynamics 365 CRM plugin for WordPress is susceptible to unauthorized access due to missing capability checks and nonce verification on functions...
PT-2025-40781
Name of the Vulnerable Software and Affected Versions LaChatterie Verger versions up to 1.2.10 Description A flaw exists in LaChatterie Verger that impacts the redirectToAuthorization function within the /src/main/services/mcp/oauth/provider.ts file. Manipulation of the URL argument leads to...
CVE-2025-61673 Karapace is vulnerable to Authentication Bypass
Karapace is an open-source implementation of Kafka REST and Schema Registry. Versions 5.0.0 and 5.0.1 contain an authentication bypass vulnerability when configured to use OAuth 2.0 Bearer Token authentication. If a request is sent without an Authorization header, the token validation logic is...
EUVD-2022-42546
Malicious code in bioql PyPI...
EUVD-2022-0931
Malicious code in bioql PyPI...
EUVD-2023-1672
Malicious code in bioql PyPI...
EUVD-2025-25438
Malicious code in bioql PyPI...
EUVD-2021-9359
Malicious code in bioql PyPI...
EUVD-2025-12378
Malicious code in bioql PyPI...
EUVD-2025-5567
Malicious code in bioql PyPI...