385 matches found
CVE-2025-10294
The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownidsharedsecret value is empty prior to authenticating a user via JWT. This makes it possible for...
CVE-2025-10294
The CVE-2025-10294 entry concerns the WordPress OwnID Passwordless Login plugin. Affected versions are all up to 1.3.4, with authentication bypass caused by not properly checking if the ownid_shared_secret is empty before authenticating via JWT. This allows unauthenticated attackers to log in as ...
EUVD-2025-34544
The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownidsharedsecret value is empty prior to authenticating a user via JWT. This makes it possible for...
CVE-2025-10294 OwnID Passwordless Login <= 1.3.4 - Authentication Bypass
The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownidsharedsecret value is empty prior to authenticating a user via JWT. This makes it possible for...
WordPress plugin OwnID Passwordless Login 安全漏洞
WordPress OwnID Passwordless Login plugin is a WordPress plugin for passwordless login function, by sending a one-time authorization code to the user's email or cell phone to complete the verification. An authentication bypass vulnerability exists in the WordPress OwnID Passwordless Login plugin,...
PT-2025-42291
Name of the Vulnerable Software and Affected Versions OwnID Passwordless Login plugin for WordPress versions prior to 1.3.5 Description The OwnID Passwordless Login plugin for WordPress is susceptible to an Authentication Bypass. This occurs because the plugin does not adequately verify if the...
CVE-2025-61926 Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret
Allstar is a GitHub App to set and enforce security policies. In versions prior to 4.5, a vulnerability in Allstar’s Reviewbot component caused inbound webhook requests to be validated against a hard-coded, shared secret. The value used for the secret token was compiled into the Allstar binary an...
EUVD-2020-20111
Malware in sbrugna...
EUVD-2012-3418
Malware in sbrugna...
EUVD-2007-0061
Malware in sbrugna...
EUVD-2008-1164
Malware in sbrugna...
EUVD-2021-15687
Malware in sbrugna...
EUVD-2020-4001
Malware in sbrugna...
EUVD-2012-5639
Malware in sbrugna...
EUVD-2017-16756
Malware in sbrugna...
EUVD-2016-3301
Malware in sbrugna...
EUVD-2020-6089
Malware in sbrugna...
EUVD-2020-7906
Malware in sbrugna...