336 matches found
EUVD-2021-21704
Malware in sbrugna...
EUVD-2007-2804
Malware in sbrugna...
EUVD-2017-16011
Malware in sbrugna...
EUVD-2006-3158
Malware in sbrugna...
EUVD-2018-18119
Malware in sbrugna...
EUVD-2005-3953
Malware in sbrugna...
EUVD-2018-4896
Malware in sbrugna...
EUVD-2006-6015
Malware in sbrugna...
EUVD-2025-28375
Malicious code in bioql PyPI...
EUVD-2023-45305
Malicious code in bioql PyPI...
EUVD-2022-33049
Malicious code in bioql PyPI...
EUVD-2023-40283
Malicious code in bioql PyPI...
EUVD-2022-32871
Malicious code in bioql PyPI...
EUVD-2023-45304
Malicious code in bioql PyPI...
CVE-2025-10436
A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/supsearchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-30064
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...
CVE-2025-30064
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...
CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...
CVE-2025-30064
Technical details about CVE-2025-30064 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; current sources do not reveal affected products, versions, or remediation steps.
CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...