310 matches found
CVE-2025-57618
A path traversal vulnerability in FastX3 thru 3.3.67 allows an unauthenticated attacker to read arbitrary files on the server. By leveraging this vulnerability, it is possible to access the application's configuration files, which contain the secret key used to sign JSON Web Tokens as well as...
WordPress Copypress Rest API plugin code execution vulnerability
WordPress Copypress Rest API plugin plugin is used to extend the functionality of WordPress plugin , by providing a RESTful interface to achieve data interaction . A code execution vulnerability exists in the WordPress Copypress Rest API plugin, which stems from the use of a hard-coded JWT signin...
SUSE CVE-2025-61152
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...
CVE-2025-61152
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...
CVE-2025-61152
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...
CVE-2025-61152
The vulnerability CVE-2025-61152 affects python-jose up to version 3.3.0. It allows JWT tokens signed with alg=none to be decoded and accepted without cryptographic signature verification, enabling a forged token with arbitrary claims (e.g., is_admin=true) and bypassing authentication in applicat...
CVE-2025-61152
Removed by vendor...
EUVD-2021-16069
Malware in sbrugna...
EUVD-2020-0429
Malware in sbrugna...
EUVD-2020-19718
Malware in sbrugna...
EUVD-2019-0429
Malware in sbrugna...
EUVD-2022-0445
Malicious code in bioql PyPI...
EUVD-2025-25832
Malicious code in bioql PyPI...
EUVD-2025-6727
Malicious code in bioql PyPI...
EUVD-2025-16789
Malicious code in bioql PyPI...
EUVD-2022-2304
Malicious code in bioql PyPI...
EUVD-2024-2326
Malicious code in bioql PyPI...
EUVD-2022-1387
Malicious code in bioql PyPI...
EUVD-2025-25521
Malicious code in bioql PyPI...
EUVD-2024-0609
Malicious code in bioql PyPI...