2318 matches found
CVE-2025-10293
The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...
EUVD-2025-34570
The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...
CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...
CVE-2025-10293: Improper Authentication
The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...
PT-2025-42290
Name of the Vulnerable Software and Affected Versions Keyy Two Factor Authentication plugin for WordPress versions prior to 1.2.4 Description The Keyy Two Factor Authentication plugin for WordPress is susceptible to privilege escalation, potentially leading to account takeover. The issue stems fr...
A New Attack Lets Hackers Steal 2-Factor Authentication Codes From Android Phones
The malicious app required to make a “Pixnapping” attack work requires no permissions...
EUVD-2025-34228
An Insertion of Sensitive Information into Log File vulnerability CWE-532 in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an attacker with at least read-only privileges to retrieve sensitive 2FA-related information via observing log...
A week in security (October 6 – October 12)
Last week on Malwarebytes Labs: Apple voices concerns over age-check law that could put user privacy at risk Your passwords don’t need so many fiddly characters, NIST says Millions of very private chats exposed by two AI companion apps Fake VPN and streaming app drops malware that drains your ban...
EUVD-2018-12217
Malware in sbrugna...
EUVD-2013-4101
Malware in sbrugna...
EUVD-2021-10244
Malware in sbrugna...
EUVD-2020-29783
Malware in sbrugna...
EUVD-2014-0020
Malware in sbrugna...
EUVD-2021-17060
Malware in sbrugna...
EUVD-2021-23730
Malware in sbrugna...
EUVD-2021-19560
Malware in sbrugna...
EUVD-2020-25242
Malware in sbrugna...
EUVD-2021-26246
Malware in sbrugna...