CVE-2025-30144

Summary La libreria fast-jwt non valida correttamente il claim iss in base alla RFC https://datatracker.ietf.org/doc/html/rfc7519page-9. Details La validazione del claim iss issuer all'interno della libreria fast-jwt consente un array di stringhe come valore iss valido. Questa lacuna progettuale...

EUVD-2025-23514

Malicious code in bioql PyPI...

CVE-2025-44963

RUCKUS Network Director RND before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key...

PT-2025-31827 · Ruckus · Ruckus Network Director

Name of the Vulnerable Software and Affected Versions: RUCKUS Network Director versions prior to 4.5 Description: RUCKUS Network Director RND is susceptible to an issue allowing an attacker to spoof an administrator JSON Web Token JWT if they possess knowledge of a hardcoded secret key...

CVE-2025-44963

RUCKUS Network Director RND before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key...

CVE-2022-42983

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...