CVE-2025-10294

The CVE-2025-10294 entry concerns the WordPress OwnID Passwordless Login plugin. Affected versions are all up to 1.3.4, with authentication bypass caused by not properly checking if the ownid_shared_secret is empty before authenticating via JWT. This allows unauthenticated attackers to log in as ...

CVE-2025-10294 OwnID Passwordless Login <= 1.3.4 - Authentication Bypass

The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownidsharedsecret value is empty prior to authenticating a user via JWT. This makes it possible for...

WordPress WPBifröst – Instant Passwordless Temporary Login Links plugin <= 1.0.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability

Missing Authorization to Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin WPBifröst – Instant Passwordless Temporary Login Links versions = 1.0.7...

WordPress OwnID Passwordless Login plugin <= 1.3.4 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin OwnID Passwordless Login versions = 1.3.4...

WordPress plugin OwnID Passwordless Login 安全漏洞

WordPress OwnID Passwordless Login plugin is a WordPress plugin for passwordless login function, by sending a one-time authorization code to the user's email or cell phone to complete the verification. An authentication bypass vulnerability exists in the WordPress OwnID Passwordless Login plugin,...

EUVD-2017-11788

Malware in sbrugna...

EUVD-2019-17222

Malware in sbrugna...

EUVD-2020-30290

Malware in sbrugna...

EUVD-2015-7156

Malware in sbrugna...

EUVD-2024-17455

Malicious code in bioql PyPI...

EUVD-2025-29644

Malicious code in bioql PyPI...

EUVD-2022-2531

Malicious code in bioql PyPI...

EUVD-2025-30266

Malicious code in bioql PyPI...

EUVD-2025-16035

Malicious code in bioql PyPI...

EUVD-2024-49780

Malicious code in bioql PyPI...

EUVD-2024-26179

Malicious code in bioql PyPI...

EUVD-2025-16037

Malicious code in bioql PyPI...

EUVD-2024-51139

Malicious code in bioql PyPI...

EUVD-2025-3424

Malicious code in bioql PyPI...

CVE-2025-34217 Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '/.ssh/authorizedkeys' and a sudoers rule granting the printerlogicssh group 'NOPASSWD: ALL'. Possession of the matching...