269 matches found
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function on the critical API endpoints messages, transactions, and session, handling sensitive user data and system operations. An unauthenticated attacker can access confidential conversation data an...
PT-2025-48792
The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.5 via upload filenames. This makes it possible for unauthenticated attackers to extract session values that can subsequently be used to access...
CVE-2025-12390 Org.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session id
A flaw was found in Keycloak. In Keycloak where a user can accidentally get access to another user's session if both use the same device and browser. This happens because Keycloak sometimes reuses session identifiers and doesn’t clean up properly during logout when browser cookies are missing. As...
EUVD-2009-4282
Malware in sbrugna...
EUVD-1999-1509
Malware in sbrugna...
EUVD-2009-2484
Malware in sbrugna...
EUVD-2006-1339
Malware in sbrugna...
EUVD-2005-0079
Malware in sbrugna...
EUVD-2014-5996
Malware in sbrugna...
EUVD-2020-17406
Malware in sbrugna...
EUVD-2017-9243
Malware in sbrugna...
EUVD-2009-0042
Malware in sbrugna...
EUVD-2008-0894
Malware in sbrugna...
EUVD-2016-7264
Malware in sbrugna...
EUVD-2021-16004
Malware in sbrugna...
EUVD-2019-8320
Malware in sbrugna...
EUVD-2020-5562
Malware in sbrugna...
EUVD-2021-2894
Malicious code in bioql PyPI...