Lucene search
+L

10 matches found

EUVD
EUVD
added 5 days ago9 views

EUVD-2026-51653

An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management module, authentication logic, logout handler components...

5.5AI score0.00276EPSS
SaveExploits1References3
Cvelist
Cvelist
added 6 days ago32 views

CVE-2026-51953

An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management module, authentication logic, logout handler components...

0.00276EPSS
SaveExploits1References2
CVE
CVE
added 6 days ago19 views

CVE-2026-51953

Summary of CVE-2026-51953 (FeehiCMS v2.1.1) : A privilege-escalation vulnerability exists in FeehiCMS affecting the Session management module, authentication logic, and logout handler. The issue allows an attacker to escalate privileges within the application. The NVD/NIST entry lists CVSSv3.1 ba...

7.4CVSS5.5AI score0.00276EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 6 days ago11 views

PT-2026-66863

Name of the Vulnerable Software and Affected Versions FeehiCMS version 2.1.1 Description An issue exists in the Session management module, authentication logic, and logout handler components that allows an attacker to escalate privileges. Recommendations At the moment, there is no information abo...

5.5AI score0.00276EPSS
SaveExploits1References4
NVD
NVD
added 2025/08/08 8:15 p.m.9 views

CVE-2025-8737

A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirecturl leads to open...

5.1CVSS0.00232EPSS
SaveExploits0References5
CVE
CVE
added 2025/08/08 7:32 p.m.22 views

CVE-2025-8737

The CVE-2025-8737 entry concerns zlt2000 microservices-platform (up to 6.0.0). A vulnerability exists in the onLogoutSuccess function (OauthLogoutSuccessHandler.java) where manipulating the redirect_url argument causes an open redirect. Exploitation can be performed remotely, and public disclosur...

5.1CVSS7.1AI score0.00232EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/08/08 7:32 p.m.7 views

CVE-2025-8737 zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect

A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirecturl leads to open...

5.1CVSS7.1AI score0.00232EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/08 7:32 p.m.6 views

CVE-2025-8737 zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect

A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirecturl leads to open...

5.1CVSS5.2AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/08/08 12:0 a.m.12 views

PT-2025-32408 · Unknown · Zlt2000 Microservices-Platform

Name of the Vulnerable Software and Affected Versions: zlt2000 microservices-platform versions through 6.0.0 Description: A problematic issue exists in zlt2000 microservices-platform. The issue is related to an open redirect vulnerability within the onLogoutSuccess function located in the file...

5.1CVSS6.8AI score0.00232EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2025/06/17 2:20 p.m.12 views

ash_authentication_phoenix has Insufficient Session Expiration

Impact Session tokens remain valid on the server after user logout, creating a security gap where: - Compromised tokens via XSS, network interception, or device theft continue to work even after the user logs out - The sessions stored in the database still expire, limiting the duration during whi...

2.3CVSS6.6AI score0.00402EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder