399 matches found
CVE-2025-68620 Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling
Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 expose two features that can be chained together to steal JWT authentication tokens without any prior authentication. The attack combines WebSocket-based request enumeration with unauthenticated...
CVE-2025-68620
CVE-2025-68620 concerns Signal K Server (v2.19.0 prior) where two flaws enable JWT token theft without authentication. First, Unauthenticated WebSocket Request Enumeration: connecting to the stream endpoint with serverevents=all exposes cached ACCESS_REQUEST events to readonly/unauthenticated use...
CVE-2025-56643
Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a toke...
Access Control Bypass
Overview @kottster/cli is a CLI for Kottster Affected versions of this package are vulnerable to Access Control Bypass via the initApp and installPackagesForDataSource actions. An attacker can gain unauthorized administrative access and execute arbitrary system commands by repeatedly triggering...
CVE-2025-62647
The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...
CVE-2025-62647
The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...
EUVD-2021-0792
Malware in sbrugna...
EUVD-2021-2067
Malware in sbrugna...
EUVD-2020-19058
Malware in sbrugna...
EUVD-2021-26828
Malware in sbrugna...
EUVD-2020-23702
Malware in sbrugna...
EUVD-2020-1445
Malware in sbrugna...
EUVD-2020-18797
Malware in sbrugna...
EUVD-2021-21985
Malware in sbrugna...
EUVD-2018-1923
Malware in sbrugna...
EUVD-2020-29443
Malware in sbrugna...
EUVD-2023-37405
Malicious code in bioql PyPI...
EUVD-2022-33473
Malicious code in bioql PyPI...