PT-2026-60146

The Grav API plugin getgrav/grav-plugin-api before 2.0.4 contains an improper session invalidation vulnerability where JWT access tokens are issued without a jti JWT ID claim and therefore cannot be revoked server-side. Unlike refresh tokens, access tokens remain valid for their full lifetime...

CVE-2026-4180

A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The manipulation of the argument tokenid leads to improper access controls. The attack may be initiated remotely. The exploit is publicly...

Authorization Bypass Through User-Controlled Key

Overview @withstudiocms/auth-kit is an Utilities for managing authentication Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the DELETE /studiocmsapi/dashboard/api-tokens endpoint. An attacker can revoke API tokens belonging to other users,...

CVE-2025-3594

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18454...

CVE-2024-10139

creationtimestamp| type| source ---|---|--- 2024-10-19 17:09:56+00:00| seen| https://t.me/cvedetector/8363...

CVE-2024-6595

creationtimestamp| type| source ---|---|--- 2024-07-17 04:50:44+00:00| seen| https://t.me/cvedetector/1046...

The vulnerability of the NtFilterToken ParentTokenId component in Microsoft Windows operating systems, which allows a hacker to increase their privileges.

The vulnerability of the NtFilterToken ParentTokenId component in Microsoft Windows operating systems is related to incorrect elimination of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker to increase their privileges...

Cisco IOS XE Software License Issue Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An authorization issue vulnerability exists in the Cisco REST API virtual service container in Cisco IOS XE Software. The vulnerability stems from a failure to perform proper checks in the code area th...

CVE-2019-12643

A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on the managed Cisco IOS XE device. The vulnerability is due to an improper check performed by the area of code that manages the REST...

cxf: CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens

It was found that the token cacher in Apache cxf uses a flawed way of caching tokens that are associated with the delegation token received from Security Token Service STS. This vulnerability could allow an attacker to craft a token which could return an identifier corresponding to a cached token...

Cross-Site Request Forgery (CSRF)

zendframework is vulnerable to cross-site request forgery CSRF. The library does not correctly identify null or mal-formed token identifiers, causing them to be falsely identified as valid tokens. This can allow a malicious user to use this as a vector for cross-site request forgery CSRF...