607 matches found
CVE-2025-55306 GenX_FX authentication bypass in JWT validation
GenXFX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources Google Cloud...
CVE-2025-55306 GenX_FX authentication bypass in JWT validation
GenXFX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources Google Cloud...
CVE-2025-55306
GenX_FX backend vulnerability: environment-variable misconfiguration can expose API keys and authentication tokens, enabling unauthorized access to cloud resources (Google Cloud, Firebase, GitHub, etc.). Impact is high (credential exposure with potential full resource access) as reported across m...
PT-2025-33843 · Microsoft +2 · Github +3
Name of the Vulnerable Software and Affected Versions: GenX FX affected versions not specified Description: GenX FX is an IA trading platform focused on forex trading. A flaw in the backend may expose API keys and authentication tokens if environment variables are misconfigured. This could allow...
CVE-2025-8342
The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...
CVE-2025-8342
The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...
CVE-2025-8342 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass
The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...
CVE-2025-8342
CVE-2025-8342 concerns the WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress. Affected versions up to 1.8.47 allow unauthenticated attackers to bypass OTP verification via faulty empty-value checks in lwp_ajax_register and exploit Firebase API error handling when the ...
CVE-2025-8342 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass
The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...
PT-2025-33428 · WordPress · Woocommerce Otp Login With Phone Number
Name of the Vulnerable Software and Affected Versions: WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress versions up to and including 1.8.47 Description: The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is susceptible to authenticatio...
Malicious code in luminescence-hexo-firebase-kuiperbelt (npm)
The package luminescence-hexo-firebase-kuiperbelt was found to contain malicious code...
Malicious code in xenos-cosmicsilence-ichnology-firebase (npm)
The package xenos-cosmicsilence-ichnology-firebase was found to contain malicious code...
Malicious code in dotenv-safe-firebase-uninstall-innercore (npm)
The package dotenv-safe-firebase-uninstall-innercore was found to contain malicious code...
Malicious code in meissa-firebase-equinox-docusaurus (npm)
The package meissa-firebase-equinox-docusaurus was found to contain malicious code...
Malicious code in nebula-firebase-queue (npm)
The package nebula-firebase-queue was found to contain malicious code...
Malicious code in corvus-firebase-exobiology-callback (npm)
The package corvus-firebase-exobiology-callback was found to contain malicious code...
Malicious code in andromeda-child-process-local-firebase (npm)
The package andromeda-child-process-local-firebase was found to contain malicious code...
MAL-2025-37921 Malicious code in upload-file-to-firebase (npm)
The package upload-file-to-firebase was found to contain malicious code...