8359 matches found
EUVD-2020-24023
Malware in sbrugna...
EUVD-2020-25455
Malware in sbrugna...
EUVD-2017-17040
Malware in sbrugna...
EUVD-2021-0966
Malware in sbrugna...
EUVD-2018-7619
Malware in sbrugna...
EUVD-2014-8355
Malware in sbrugna...
EUVD-2025-32455
A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...
CVE-2025-11290
A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...
CVE-2025-11290
CRMEB up to version 5.6.1 is affected by CVE-2025-11290 due to the JWT HMAC Secret Handler component using a hard-coded cryptographic key when manipulating the secret argument (input default). The issue enables remote exploitation; exploitability is described as difficult, with a publicly availab...
CVE-2025-11290 CRMEB JWT HMAC Secret hard-coded key
A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...
CVE-2025-11290 CRMEB JWT HMAC Secret hard-coded key
A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...
CVE-2025-11290 CRMEB JWT HMAC Secret hard-coded key
A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...
EUVD-2025-32447
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...
CVE-2025-11284
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...
CVE-2025-11284 Zytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...
CVE-2025-11284 Zytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...
CVE-2025-11284
CVE-2025-11284 describes a vulnerability in Zytec Dalian Zhuoyun Technology Central Authentication Service (CAS) v3, affecting the HTTP Header Handler component. The flaw arises from a vulnerable handling of the Authorization argument in the request to /index.php/auth/Ops/git, which can lead to u...
PT-2025-40795
Name of the Vulnerable Software and Affected Versions Zytec Dalian Zhuoyun Technology Central Authentication Service version 3 Description A security issue exists in Zytec Dalian Zhuoyun Technology Central Authentication Service version 3 related to the HTTP Header Handler component. The issue...
PT-2025-40806
Name of the Vulnerable Software and Affected Versions CRMEB versions prior to 5.6.2 Description A security issue exists in CRMEB related to the JWT HMAC Secret Handler component. Manipulation of the secret argument with the input default leads to the use of a hard-coded cryptographic key within a...
Zytec Central Authentication Service 安全漏洞
Zytec Central Authentication Service is a centralized authentication service from China's Zhuo Yun Zytec Company. A security vulnerability exists in Zytec Central Authentication Service version 3, which stems from the incorrect operation of the HTTP header handler on the parameter Authorization,...