EUVD-2024-51979

Malicious code in bioql PyPI...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484: Use of Hard-coded Credentials

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

Ever Traduora Platform security vulnerabilities

Ever Traduora Platform is an open translation management platform from Traduora, Inc. A security vulnerability exists in Ever Traduora Platform version 0.20.0 and earlier, which stems from the use of a hard-coded JWT signing key that could lead to elevated privileges...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

CVE-2024-53484

The Ever Traduora open translation management platform (version 0.20.0 and below ) is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key . This flaw allows an attacker to potentially gain higher privileges than intended, compromising system security. While no specif...

PT-2024-35759

Name of the Vulnerable Software and Affected Versions Ever Traduora versions 0.20.0 and below Description The issue is related to the use of a hard-coded JWT signing key, which allows for privilege escalation. This means that an attacker could potentially gain higher privileges than intended,...

WS-2022-0081

Traduora versions 0.8.7 to 0.19.0 vulnerable to insufficient session expiration, which allows unauthenticated remote attackers to hijack recently logged-in users' sessions...

Exposure of Sensitive Information to an Unauthorized Actor in traduora/traduora

Description Username Enumeration in traduora. Proof of Concept 1. setup traduora to reproduce the vulnerability 2. go to sign in page http://localhost:8080/login 3. Append non registered user email and password it shows Error,resource not found 4. when Appending correct username and fake password...