EUVD-2020-18844

Malware in sbrugna...

CVE-2020-26236

In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. Attacker attempts login for user, and i...

CVE-2020-26236

In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. Attacker attempts login for user, and i...

CVE-2020-26236

In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. Attacker attempts login for user, and i...

Code injection

In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. Attacker attempts login for user, and i...

CVE-2020-26236 Verification Code Hijacking in ScratchVerifier

In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. Attacker attempts login for user, and i...

CVE-2020-26236

In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. Attacker attempts login for user, and i...

CVE-2020-26236

The CVE-2020-26236 vulnerability affects ScratchVerifier and describes a verification-code hijack during login. According to Red Hat/CVE listings and cross-referenced sources, before commit a603769 an attacker can hijack a user’s login flow on any site using ScratchVerifier: the attacker initiate...

ScratchVerifier License Issue Vulnerability

ScratchVerifier is a software from the ScratchVerifier team used to provide verification and authorization for Scratch accounts. A security vulnerability exists in versions prior to ScratchVerifier commit a603769, which can be exploited by an attacker to hijack the authentication process to log i...

PT-2020-16365

Name of the Vulnerable Software and Affected Versions ScratchVerifier versions prior to commit a603769 Description An attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. The exploitation involves the following steps: 1...

CVE-2020-26236: Improper Authentication

In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. Attacker attempts login for user, and i...