390 matches found
WordPress Copypress Rest API plugin code execution vulnerability
WordPress Copypress Rest API plugin plugin is used to extend the functionality of WordPress plugin , by providing a RESTful interface to achieve data interaction . A code execution vulnerability exists in the WordPress Copypress Rest API plugin, which stems from the use of a hard-coded JWT signin...
SUSE CVE-2025-61152
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...
CVE-2025-61152
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...
CVE-2025-61152
Removed by vendor...
CVE-2025-61152
The vulnerability CVE-2025-61152 affects python-jose up to version 3.3.0. It allows JWT tokens signed with alg=none to be decoded and accepted without cryptographic signature verification, enabling a forged token with arbitrary claims (e.g., is_admin=true) and bypassing authentication in applicat...
CVE-2025-61152
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...
EUVD-2019-0429
Malware in sbrugna...
EUVD-2021-16069
Malware in sbrugna...
EUVD-2020-0429
Malware in sbrugna...
EUVD-2020-19718
Malware in sbrugna...
EUVD-2022-0445
Malicious code in bioql PyPI...
EUVD-2024-0609
Malicious code in bioql PyPI...
EUVD-2022-5973
Malicious code in bioql PyPI...
EUVD-2024-2326
Malicious code in bioql PyPI...
EUVD-2025-16789
Malicious code in bioql PyPI...
EUVD-2024-25315
Malicious code in bioql PyPI...
EUVD-2022-2304
Malicious code in bioql PyPI...
EUVD-2025-25832
Malicious code in bioql PyPI...