EUVD-2025-4770

Malicious code in bioql PyPI...

EUVD-2025-4655

Malicious code in bioql PyPI...

CVE-2024-57056

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

CVE-2024-57055

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client not the general-use JSON services and requires reverse...

CVE-2024-57055

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client not the general-use JSON services and requires reverse...

CVE-2024-57056

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

CVE-2024-57055

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client not the general-use JSON services and requires reverse...

CVE-2024-57055: Missing Authentication for Critical Function

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client not the general-use JSON services and requires reverse...

PT-2025-6739

Name of the Vulnerable Software and Affected Versions WombatDialer versions prior to 25.02 Description The issue is related to incorrect cookie session handling, which results in the full session identity being written to system logs. This could be used by a malicious attacker to impersonate an...

CVE-2024-57056

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

CVE-2024-57056

WombatDialer versions prior to 25.02 are vulnerable to insufficient session expiration due to incorrect cookie session handling. This flaw causes the full session identity to be written to system logs, which a malicious attacker could exploit to impersonate an existing user session . To remediate...

CVE-2024-57056: Insufficient Session Expiration

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

CVE-2024-57056

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

CVE-2024-57055

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client not the general-use JSON services and requires reverse...

CVE-2024-57055

WombatDialer versions prior to 25.02 are susceptible to a Server-Side Access Control Bypass vulnerability. This flaw could allow unauthorized users to call certain services without the required access level. The impact is limited to services used by the client (excluding general-use JSON services...

WombatDialer 安全漏洞

WombatDialer is a powerful predictive dialer for Asterisk PBX from WombatDialer. A security vulnerability exists in WombatDialer versions prior to 25.02 that stems from mishandling of cookie sessions, leading to session identity disclosure...

WombatDialer 安全漏洞

WombatDialer is a powerful predictive dialer for Asterisk PBX from WombatDialer. A security vulnerability exists in WombatDialer versions prior to 25.02 that stems from a server-side access control bypass that could result in unauthorized calls to services...

PT-2025-6738 · Unknown · Wombatdialer

Name of the Vulnerable Software and Affected Versions: WombatDialer versions prior to 25.02 Description: A Server-Side Access Control Bypass issue could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the...