7058 matches found
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...
WordPress plugin Reuse Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
SAMSUNG Mobile Processor Exynos 安全漏洞
SAMSUNG Mobile Processor Exynos is a system-on-chip SoC from South Korea's Samsung SAMSUNG dedicated to smartphones and tablets. A security vulnerability exists in SAMSUNG Mobile Processor Exynos, which stems from a post-release reuse issue in the GPU that could lead to elevated privileges. The...
mediatek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from Chinese company MediaTek. A security vulnerability exists in mediatek Chipsets, which stems from reuse after release and could lead to local elevation of privilege...
mediatek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from reuse after release and could lead to local elevation of privilege...
SAMSUNG Mobile Processor Exynos 安全漏洞
SAMSUNG Mobile Processor Exynos is a system-on-chip SoC from South Korea's Samsung SAMSUNG dedicated to smartphones and tablets. A security vulnerability exists in SAMSUNG Mobile Processor Exynos, which originates from a post-release reuse in the Xclipse GPU driver. The following products are...
NetSurf 安全漏洞
NetSurf is a lightweight browser from the NetSurf organization. A security vulnerability exists in NetSurf version 3.11, which stems from a post-release reuse issue with the domnodesettextcontent function...
CVE-2025-64386
The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...
Astra Linux – Vulnerability in curl
In some cases, curl may reuse the wrong connection for SMB transfers. curl features a pool of recent connections, so subsequent requests can reuse an existing connection to avoid additional overhead. When reusing a connection, a set of criteria must be met. Due to a logical error in the code, a...
CVE-2025-63563
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password...
CVE-2025-64386
The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...
CVE-2025-64386 HIJACKING OF THE TOKEN AND GAINING ACCESS
The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session...
EUVD-2025-37224
Nagios Fusion versions prior to R2.1 contain a vulnerability due to the application not requiring re-authentication or session rotation when a user has enabled two-factor authentication 2FA. As a result, an adversary who has obtained a valid session could continue using the active session after t...
CVE-2025-63563
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that originates from memory reuse after release...
PT-2025-44625
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The web server allows an attacker to reuse an old session JWT token while a legitimate session is active, potentially leading to session hijacking. An attacker...
CVE-2025-63563
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password...
Microsoft Edge 资源管理错误漏洞
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from a resource management error vulnerability that stems from memory reuse after release...
Red Hat Enterprise Linux 资源管理错误漏洞
Red Hat Enterprise Linux is a Linux operating system for enterprise users from Red Hat USA. A resource management error vulnerability exists in Red Hat Enterprise Linux that originates when certain data structures are freed during cleanup of client resources without properly separating the...