231 matches found
EUVD-2025-25603
Malicious code in bioql PyPI...
EUVD-2025-14814
Malicious code in bioql PyPI...
[SECURITY] Fedora 42 Update: perl-Catalyst-Plugin-Session-0.44-1.fc42
This plugin is the base of two related parts of functionality required for session management in web applications. The first part, the State, is getting the browser to repeat back a session key, so that the web application can identify the client and logically string several requests together int...
CVE-2025-55626
An Insecure Direct Object Reference IDOR vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage...
CVE-2025-55626
An Insecure Direct Object Reference IDOR vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage...
CVE-2025-55626
An Insecure Direct Object Reference IDOR vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage...
PT-2025-34457 · Reolink · Reolink Smart 2K+ Plug-In Wi-Fi Video Doorbell
Name of the Vulnerable Software and Affected Versions: Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.4662 2503122283 Description: The device suffers from an Insecure Direct Object Reference IDOR vulnerability. This allows unauthorized attackers to access Admin-only...
CVE-2025-55626
An Insecure Direct Object Reference IDOR vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage...
CVE-2025-55626: Improper Access Control
An Insecure Direct Object Reference IDOR vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage...
Malicious code in shopify-app-session-storage-redis (npm)
The package shopify-app-session-storage-redis was found to contain malicious code...
Malicious code in shopify-app-session-storage-mysql (npm)
The package shopify-app-session-storage-mysql was found to contain malicious code...
MAL-2025-33121 Malicious code in shopify-app-session-storage-sqlite (npm)
The package shopify-app-session-storage-sqlite was found to contain malicious code...
MAL-2025-33116 Malicious code in shopify-app-session-storage-memory (npm)
The package shopify-app-session-storage-memory was found to contain malicious code...
Malicious code in shopify-app-session-storage-memory (npm)
The package shopify-app-session-storage-memory was found to contain malicious code...
Malicious code in shopify-app-session-storage-sqlite (npm)
The package shopify-app-session-storage-sqlite was found to contain malicious code...
Malicious code in shopify-app-session-storage (npm)
The package shopify-app-session-storage was found to contain malicious code...
MAL-2025-33120 Malicious code in shopify-app-session-storage-redis (npm)
The package shopify-app-session-storage-redis was found to contain malicious code...
MAL-2025-33119 Malicious code in shopify-app-session-storage-postgresql (npm)
The package shopify-app-session-storage-postgresql was found to contain malicious code...