180 matches found
CVE-2026-30789
CVE-2026-30789 concerns the RustDesk Client (rustdesk-client) across Windows, macOS, Linux, iOS, and Android. It enables an authentication bypass via capture-replay and the use of a password hash with insufficient computational effort, by reusing Session IDs (session replay) in login and peer aut...
CVE-2026-30789 RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force
Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Client login, peer authentication modules allows Password Brute Forcing. T...
PT-2026-23455
Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description A flaw exists in RustDesk Client that allows for authentication bypass through capture-replay attacks and the use of a password hash with insufficient computational effort. This impacts the...
CVE-2025-1968
Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs Session Replay Attacks.This issue affects Sitefinity: from 14.0 through 14.3, from 14.4 before 14.4.8145, from 15.0 before 15.0.8231,...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
MAL-2025-190649 Malicious code in posthog-react-native-session-replay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2487b6f3e3f9f2ef47f2509033fe071b332f5035e1e01320482eea928ae8a120 The package posthog-react-native-session-replay was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198632
Malicious code in posthog-react-native-session-replay npm...
EUVD-2003-0214
Malware in sbrugna...
EUVD-2001-1456
Malware in sbrugna...
EUVD-2005-1559
Malware in sbrugna...
EUVD-2005-2404
Malware in sbrugna...
EUVD-2020-15931
Malware in sbrugna...
EUVD-2008-2230
Malware in sbrugna...
EUVD-2022-33676
Malicious code in bioql PyPI...
EUVD-2024-35179
Malicious code in bioql PyPI...
EUVD-2024-49231
Malicious code in bioql PyPI...
EUVD-2023-52299
Malicious code in bioql PyPI...
EUVD-2023-37777
Malicious code in bioql PyPI...
PT-2025-33276 · Unknown · 5032 16Pt Digital Configurable Module
Name of the Vulnerable Software and Affected Versions: 5032 16pt Digital Configurable module affected versions not specified Description: A security issue exists within the web server of the 5032 16pt Digital Configurable module. Intercepted session credentials can be reused within a 3-minute...
GO-2025-3812 File Browser’s insecure JWT handling can lead to session replay attacks after logout in github.com/filebrowser/filebrowser
File Browser’s insecure JWT handling can lead to session replay attacks after logout in github.com/filebrowser/filebrowser...