EUVD-2024-51979

Malicious code in bioql PyPI...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

The Ever Traduora open translation management platform (version 0.20.0 and below ) is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key . This flaw allows an attacker to potentially gain higher privileges than intended, compromising system security. While no specif...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

PT-2024-35759

Name of the Vulnerable Software and Affected Versions Ever Traduora versions 0.20.0 and below Description The issue is related to the use of a hard-coded JWT signing key, which allows for privilege escalation. This means that an attacker could potentially gain higher privileges than intended,...

Ever Traduora Platform 安全漏洞

Ever Traduora Platform is an open translation management platform from Traduora, Inc. A security vulnerability exists in Ever Traduora Platform version 0.20.0 and earlier, which stems from the use of a hard-coded JWT signing key that could lead to elevated privileges...

CVE-2024-53484: Use of Hard-coded Credentials

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

WS-2022-0081

Traduora versions 0.8.7 to 0.19.0 vulnerable to insufficient session expiration, which allows unauthenticated remote attackers to hijack recently logged-in users' sessions...

Exposure of Sensitive Information to an Unauthorized Actor in traduora/traduora

Description Username Enumeration in traduora. Proof of Concept 1. setup traduora to reproduce the vulnerability 2. go to sign in page http://localhost:8080/login 3. Append non registered user email and password it shows Error,resource not found 4. when Appending correct username and fake password...