5 matches found
EUVD-2024-22954
Malicious code in bioql PyPI...
8.8CVSS7AI score0.00655EPSS
SaveExploits0References5
CVE-2023-49079
Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary users to impersonate any remote user. This issue has been patched in version 2023.11.1-beta.1...
9.3CVSS7AI score0.004EPSS
SaveExploits0
CVE-2019-1020010
Misskey before 10.102.4 allows hijacking a user's token...
6.1CVSS6.9AI score0.01263EPSS
SaveExploits1References1
CVE-2025-24896
CVE-2025-24896 concerns Misskey, an open-source federated social platform. A login token named token is stored in a cookie for Bull Dashboard authentication and is not deleted after logout in versions up to 12.109.0 and before 2025.2.0-alpha.0, potentially exposing the token to others on public o...
8.1CVSS8.2AI score0.00587EPSS
SaveExploits0References2Affected Software1
20