15208 matches found
CVE-2025-59451
The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes...
XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
GHSA-F2HF-PFRJ-VRM7 XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
CVE-2025-59451
The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes...
PT-2025-40948
Name of the Vulnerable Software and Affected Versions YoSmart YoLink application versions through 2025-10-02 Description The YoSmart YoLink application has session tokens with unexpectedly long lifetimes. Recommendations Update to a version later than 2025-10-02. At the moment, there is no...
CVE-2025-59451
The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes...
CVE-2025-59451
The connected sources confirm CVE-2025-59451 affects the YoSmart YoLink ecosystem: the YoLink MQTT broker and the YoLink API (through 2025-10-02) use session tokens with unexpectedly long lifetimes, enabling persistent unauthorized access. CISA’s advisory details additional risks tied to this vul...
CVE-2025-9209
The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...
EUVD-2024-21972
Malicious code in bioql PyPI...
EUVD-2023-27724
Malicious code in bioql PyPI...
EUVD-2025-16491
Malicious code in bioql PyPI...
EUVD-2025-25184
Malicious code in bioql PyPI...
EUVD-2023-0665
Malicious code in bioql PyPI...
EUVD-2023-40555
Malicious code in bioql PyPI...
EUVD-2022-53427
Malicious code in bioql PyPI...
EUVD-2025-14884
Malicious code in bioql PyPI...
EUVD-2022-43897
Malicious code in bioql PyPI...
EUVD-2023-50858
Malicious code in bioql PyPI...