PT-2025-37755

Name of the Vulnerable Software and Affected Versions Positron PX360BT SW REV 8 Description The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure in implementing rolling code security. The alarm system does not properly rotate or invalidate used codes,...

CVE-2025-56448

The CVE-2025-56448 entry concerns the Positron PX360BT SW REV 8 car alarm system. The provided documents state that the vulnerability arises from a failure to properly implement rolling-code security, allowing repeated use of captured transmissions and enabling a replay attack. Affected component...

Positron PX360BT 安全漏洞

Positron PX360BT is an in-vehicle multimedia device from the Brazilian company Positron. A security vulnerability exists in the Positron PX360BT that stems from a failure to properly implement a rolling code security mechanism, which could lead to a replay attack...

Linux Distros Unpatched Vulnerability : CVE-2020-4042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of the shared secret if the director allow...

CVE-2025-56608

The CVE-2025-56608 entry concerns the SourceCodester Android app “Corona Virus Tracker App India” v1.0. The issue is in OkHttpClientWrapper.java, where handleDigest() hashes credentials with MD5 via MessageDigest.getInstance("MD5"). MD5 is used for digest authentication, introducing weaknesses su...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...

PT-2025-35777

Name of the Vulnerable Software and Affected Versions: Corona Virus Tracker App India version 1.0 Description: The Android application uses MD5 for digest authentication. The handleDigest function utilizes MessageDigest.getInstance"MD5" to hash credentials. MD5 is a cryptographic algorithm...

Linux Distros Unpatched Vulnerability : CVE-2022-22936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks,...

Linux Distros Unpatched Vulnerability : CVE-2012-5868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress 3.4.2 does not invalidate a wordpresssec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover...

My-Blog 安全漏洞

My-Blog is ZHENFENG13 individual developer by SpringBoot + Mybatis + Thymeleaf and other technologies to achieve the Java blog system, page beautiful, full-featured, easy to deploy and perfect code. A security vulnerability exists in My-Blog version 1.0.0, which stems from the lack of protection...

New TETRA Radio Encryption Flaws Expose Law Enforcement Communications

Cybersecurity researchers have discovered a fresh set of security issues in the Terrestrial Trunked Radio TETRA communications protocol, including in its proprietary end-to-end encryption E2EE mechanism that exposes the system to replay and brute-force attacks, and even decrypt encrypted traffic...

RL-MoE: an Image-Based Privacy Preserving Approach in Intelligent Transportation System

The proliferation of AI-powered cameras in Intelligent Transportation Systems ITS creates a severe conflict between the need for rich visual data and the fundamental right to privacy. Existing privacy-preserving mechanisms, such as blurring or encryption, are often insufficient, creating an...

CVE-2025-8616

CVE-2025-8616 affects OpenText OpenText Advanced Authentication (versions up to and including 6.5.0). A malicious browser plugin can record and replay the user authentication process to bypass authentication, representing a replay attack against the login flow. The vulnerability’s root cause is t...

Advisory ROSA-SA-2025-2909

software: freeradius 3.0.27 OS: ROSA-CHROME unaffected versions = freeradius-3.0.27-1 affected versions freeradius-3.0.27-1 CVE-ID: CVE-2024-3596 BDU-ID: 2024-05180 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the RADIUS authentication protocol implementation involves bypassing the authenticati...

Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal...

SUSE-SU-2025:02491-1 Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 - CVE-2024-38824: Fixed directory...

File Browser’s insecure JWT handling can lead to session replay attacks after logout

Summary File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. Please refer to the CWE's listed in this report for further reference and system standards. In summary, the main issue is: - Tokens remain valid after logout session replay...

CVE-2025-42959

An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code HMAC credential, extracted from a system missing specific security patches, is reused in a replay attack against a different system. Even if the target system is fully patched, successful exploitation...

CVE-2025-42959

An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code HMAC credential, extracted from a system missing specific security patches, is reused in a replay attack against a different system. Even if the target system is fully patched, successful exploitation...

CVE-2025-42959

CVE-2025-42959 affects SAP NetWeaver ABAP Server and SAP ABAP Platform. An unauthenticated attacker can reuse an HMAC credential extracted from a system missing a patch to perform a replay attack against another system, potentially leading to complete system compromise impacting confidentiality, ...