EUVD-2025-32012

Malicious code in bioql PyPI...

EUVD-2025-32014

Malicious code in bioql PyPI...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59685

Kazaar 1.25.12 allows a JWT with none in the alg field...

PT-2025-40251

Name of the Vulnerable Software and Affected Versions Kazaar version 1.25.12 Description The software allows a JSON Web Token JWT with 'none' specified in the 'alg' field. This can potentially compromise the integrity of the authentication process. Recommendations At the moment, there is no...

Kazaar security vulnerabilities

Kazaar is a print marketing fulfillment platform from Kazaar, Inc. A security vulnerability exists in Kazaar version 1.25.12 that stems from allowing the use of a JWT with an alg field of none, which could lead to authentication bypass...

CVE-2025-59685: Undefined Security Weakness

Kazaar 1.25.12 allows a JWT with none in the alg field...

CVE-2025-59686

Kazaar version 1.25.12 is vulnerable to an Insecure Direct Object Reference (IDOR) flaw (CWE-285) involving the /api/v1/org-id/orders/order-id/documents endpoint. The software fails to properly validate the order-id parameter, potentially allowing an attacker to perform unauthorized access or man...

CVE-2025-59686: Improper Authorization

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

PT-2025-40252

Name of the Vulnerable Software and Affected Versions Kazaar version 1.25.12 Description The software allows calls to /api/v1/org-id/orders/order-id/documents with a modified order-id. This could potentially lead to unauthorized access or manipulation of data. Recommendations Apply any available...

CVE-2025-59685

Kazaar version 1.25.12 , a print marketing fulfillment platform, is vulnerable to an authentication bypass. The software incorrectly allows the use of a JSON Web Token (JWT) where the alg field is set to none . This flaw compromises the integrity of the authentication process. No information rega...