615 matches found
EUVD-2005-3415
Malware in sbrugna...
EUVD-2014-8498
Malware in sbrugna...
UBUNTU-CVE-2023-53586
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix multiple LUNRESET handling This fixes a bug where an initiator thinks a LUNRESET has cleaned up running commands when it hasn't. The bug was added in commit 51ec502a3266 "target: Delete tmr from list before...
EUVD-2025-13559
Malicious code in bioql PyPI...
EUVD-2025-6393
Malicious code in bioql PyPI...
EUVD-2024-39563
Malicious code in bioql PyPI...
EUVD-2024-54540
Malicious code in bioql PyPI...
EUVD-2023-36565
Malicious code in bioql PyPI...
EUVD-2023-54202
Malicious code in bioql PyPI...
EUVD-2025-15452
Malicious code in bioql PyPI...
EUVD-2024-45175
Malicious code in bioql PyPI...
EUVD-2022-38899
Malicious code in bioql PyPI...
EUVD-2025-27069
Malicious code in bioql PyPI...
EUVD-2024-37312
Malicious code in bioql PyPI...
EUVD-2024-52822
Malicious code in bioql PyPI...
CVE-2025-59841 FlagForgeCTF's Improper Session Handling Allows Access After Logout
Flag Forge is a Capture The Flag CTF platform. In versions from 2.2.0 to before 2.3.1, the FlagForge web application improperly handles session invalidation. Authenticated users can continue to access protected endpoints, such as /api/profile, even after logging out. CSRF tokens are also still...
CVE-2025-59841
Flag Forge CT Fâs CVE-2025-59841 describes a flaw in session invalidation for versions 2.2.0 through 2.3.0, allowing authenticated users to access protected endpoints (e.g., /api/profile) after logout and leaving CSRF tokens valid post-logout. The issue is mitigated by upgrading to version 2.3.1,...
CVE-2025-57278
The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800B10ALKSLV01.01.02P42U1406 does not implement proper session handling. After a user authenticates from a specific IP address, the router grants access to any other client using that same IP, without requiring credentials or...
PT-2025-36919
Name of the Vulnerable Software and Affected Versions: LB-Link BL-CPE300M AX300 4G LTE Router version BL-R8800 B10 ALK SL V01.01.02P42U14 06 Description: The LB-Link BL-CPE300M AX300 4G LTE Router does not implement proper session handling. After a user authenticates from a specific IP address, t...
CVE-2025-57278
The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800B10ALKSLV01.01.02P42U1406 does not implement proper session handling. After a user authenticates from a specific IP address, the router grants access to any other client using that same IP, without requiring credentials or...