1126 matches found
PT-2025-43015
Name of the Vulnerable Software and Affected Versions Mercku M6a versions through 2.1.0 Description Session tokens on Mercku M6a devices can remain valid for an extended duration, potentially lasting months. Recommendations Update Mercku M6a devices to a version later than 2.1.0...
EUVD-2025-35315
On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases...
CVE-2025-62772
This CVE concerns Mercku M6a devices (through version 2.1.0). The issue is that session tokens may remain valid for months, enabling potential unauthorized access as described across multiple feeds. The available documents confirm the affected product and version range, but do not provide a detai...
CVE-2025-62774
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps...
CVE-2025-62774: Insufficient Entropy
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps...
EUVD-2025-34466
Stored Cross-Site Scripting XSS in Perfex CRM chatbot before 3.3.1 allows attackers to inject arbitrary HTML/JavaScript. The payload is executed in the browsers of users viewing the chat, resulting in client-side code execution, potential session token theft, and other malicious actions. A...
CVE-2025-4614
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue ...
EUVD-2025-33581
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue...
CVE-2025-4614
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue...
CVE-2025-4614
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue...
CVE-2025-4614
CVE-2025-4614 describes an information-disclosure flaw in Palo Alto Networks PAN-OS software where an authenticated administrator can view other users’ session tokens in the firewall web UI, potentially allowing impersonation of those users. The risk is mitigated if CLI access is restricted to a ...
SaaS Breaches Start with Tokens - What Security Teams Must Watch
Token theft is a leading cause of SaaS breaches. Discover why OAuth and API tokens are often overlooked and how security teams can strengthen token hygiene to prevent attacks. Most companies in 2025 rely on a whole range of software-as-a-service SaaS applications to run their operations. However,...
SaaS Breaches Start with Tokens - What Security Teams Must Watch
Token theft is a leading cause of SaaS breaches. Discover why OAuth and API tokens are often overlooked and how security teams can strengthen token hygiene to prevent attacks. Most companies in 2025 rely on a whole range of software-as-a-service SaaS applications to run their operations. However,...
CVE-2025-4614: Exposure of Sensitive System Information to an Unauthorized Control Sphere
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue...
PT-2025-41451
Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS affected versions not specified Description An information disclosure issue in the software allows an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This could lead t...
Palo Alto Networks PAN-OS 10.2.x < 10.2.17 / 11.1.x < 11.1.12 / 11.2.x < 11.2.8 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.17, 11.1.x prior to 11.1.12, or 11.2.x prior to 11.2.8. It is, therefore, affected by a vulnerability. An information disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated...
CVE-2025-59451
The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes...
EUVD-2012-4506
Malware in sbrugna...