532 matches found
CVE-2025-61152
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...
PT-2025-41563
Name of the Vulnerable Software and Affected Versions python-jose versions through 3.3.0 Description The software accepts JWT tokens with 'alg=none' without cryptographic signature verification. This allows a malicious actor to create forged tokens with arbitrary claims, potentially bypassing...
CVE-2025-61152: Improper Privilege Management
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims e.g., isadmin=true and bypass authentication checks, leading to privilege escalation or unauthoriz...
CVE-2025-52960: Buffer Copy without Checking Size of Input
A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...
Linux Distros Unpatched Vulnerability : CVE-2023-53599
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix missing initialisation affecting gcm-aes-s390 Fix afalgallocareq to...
EUVD-2013-5385
Malware in sbrugna...
EUVD-2017-11529
Malware in sbrugna...
EUVD-2015-5317
Malware in sbrugna...
EUVD-2013-5338
Malware in sbrugna...
EUVD-2007-3787
Malware in sbrugna...
EUVD-2020-27080
Malware in sbrugna...
EUVD-2019-0862
Malware in sbrugna...
EUVD-2014-3374
Malware in sbrugna...
EUVD-2012-4543
Malware in sbrugna...
EUVD-2019-0872
Malware in sbrugna...
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
...
UBUNTU-CVE-2025-39931
In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...
EUVD-2023-26578
Malicious code in bioql PyPI...