Lucene search
K

8092 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-13135

Malware in sbrugna...

9CVSS8.6AI score0.07366EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-8671

Malware in sbrugna...

9.8CVSS9.2AI score0.00436EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-2283

Malware in sbrugna...

10CVSS9.5AI score0.02954EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-16805

Malware in sbrugna...

10CVSS9.3AI score0.00943EPSS
Exploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-25516

Malware in sbrugna...

7.5CVSS7.6AI score0.00424EPSS
Exploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-19381

Malware in sbrugna...

9.8CVSS9.2AI score0.00494EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-13515

Malware in sbrugna...

7.5CVSS7.5AI score0.00639EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-14964

Malware in sbrugna...

5.5CVSS5.6AI score0.00266EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/05 12:30 p.m.2 views

EUVD-2025-32455

A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...

6.3CVSS6.2AI score0.00041EPSS
Exploits0References4
NVD
NVD
added 2025/10/05 12:15 p.m.3 views

CVE-2025-11290

A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...

8.1CVSS0.00041EPSS
Exploits0References3
OSV
OSV
added 2025/10/05 12:15 p.m.1 views

CVE-2025-11290

A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...

8.1CVSS6.8AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/05 11:32 a.m.2 views

CVE-2025-11290 CRMEB JWT HMAC Secret hard-coded key

A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...

6.3CVSS6.3AI score0.00041EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/05 11:32 a.m.6 views

CVE-2025-11290 CRMEB JWT HMAC Secret hard-coded key

A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...

6.3CVSS0.00041EPSS
Exploits0References3
CVE
CVE
added 2025/10/05 11:32 a.m.6 views

CVE-2025-11290

CRMEB up to version 5.6.1 is affected by CVE-2025-11290 due to the JWT HMAC Secret Handler component using a hard-coded cryptographic key when manipulating the secret argument (input default). The issue enables remote exploitation; exploitability is described as difficult, with a publicly availab...

8.1CVSS5.6AI score0.00041EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2025/10/05 6:30 a.m.2 views

EUVD-2025-32447

A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...

7.5CVSS6.2AI score0.00061EPSS
Exploits0References5
NVD
NVD
added 2025/10/05 6:15 a.m.1 views

CVE-2025-11284

A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...

7.5CVSS0.00061EPSS
Exploits0References4
CVE
CVE
added 2025/10/05 5:32 a.m.12 views

CVE-2025-11284

CVE-2025-11284 describes a vulnerability in Zytec Dalian Zhuoyun Technology Central Authentication Service (CAS) v3, affecting the HTTP Header Handler component. The flaw arises from a vulnerable handling of the Authorization argument in the request to /index.php/auth/Ops/git, which can lead to u...

7.5CVSS6.4AI score0.00061EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/05 5:32 a.m.1 views

CVE-2025-11284 Zytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password

A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...

7.5CVSS6.4AI score0.00061EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/05 5:32 a.m.7 views

CVE-2025-11284 Zytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password

A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...

7.5CVSS0.00061EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/05 12:0 a.m.1 views

Zytec Central Authentication Service 安全漏洞

Zytec Central Authentication Service is a centralized authentication service from China's Zhuo Yun Zytec Company. A security vulnerability exists in Zytec Central Authentication Service version 3, which stems from the incorrect operation of the HTTP header handler on the parameter Authorization,...

7.5CVSS7.6AI score0.00061EPSS
Exploits0References4
Rows per page
Query Builder