6167 matches found
A Single-Root, Multi-Curve, Context-Isolated, PQC-Pluggable Cryptographic Identity Primitive with Stateless Secret Rotation
Cryptographic identity anchors modern decentralized systems, yet current standards like BIP-39 and BIP-32 are structurally insufficient for the demands of multi-curve, multi-domain, and post-quantum PQC environments. These legacy schemes rely on a monolithic identity root with no inherent context...
WordPress Show Variations as Single Products Woocommerce plugin <= 2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Show Variations as Single Products Woocommerce versions = 2.0...
PT-2025-48044
Name of the Vulnerable Software and Affected Versions CGGMP24 versions prior to 0.6.3 CGGMP24 version 0.6.3 CGGMP24 versions 0.6.3 through 0.7.0-alpha.2 Description A missing check in the ZK proof allows a single malicious signer to reconstruct the full private key. The issue was addressed with a...
CVE-2025-66114
Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...
CVE-2025-65107
Langfuse is an open source large language model engineering platform. In versions from 2.95.0 to before 2.95.12 and from 3.17.0 to before 3.131.0, in SSO provider configurations without an explicit AUTHCHECK setting, a potential account takeover may happen if an authenticated user is made to call...
CVE-2025-65107 Langfuse SSO Account Takeover via CSRF or phishing attack
Langfuse is an open source large language model engineering platform. In versions from 2.95.0 to before 2.95.12 and from 3.17.0 to before 3.131.0, in SSO provider configurations without an explicit AUTHCHECK setting, a potential account takeover may happen if an authenticated user is made to call...
CVE-2025-65107
CVE-2025-65107 affects Langfuse SSO configuration: versions 2.95.0–2.95.11 and 3.17.0–3.130.0 are vulnerable when an explicit AUTH_CHECK is not configured. Affected flow allows potential account takeover if an authenticated user is directed to a crafted URL via CSRF or phishing. Mitigations are p...
CVE-2025-66114
Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...
CVE-2025-66114 WordPress Show Variations as Single Products Woocommerce plugin <= 2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...
CVE-2025-66114
CVE-2025-66114 refers to a Missing Authorization / Broken Access Control in the WordPress plugin Show Variations as Single Products Woocommerce (plugin <= 2.0). The vulnerability enables access control bypass for variations data; exploitation details, affected versions (
CVE-2025-66114 WordPress Show Variations as Single Products Woocommerce plugin <= 2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...
CVE-2025-66114: Missing Authorization
Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Show Variations as Single Products Woocommerce: from n/a through =...
PT-2025-47813
Name of the Vulnerable Software and Affected Versions Langfuse versions 2.95.0 through 2.95.11 Langfuse versions 3.17.0 through 3.130.0 Description Langfuse is a large language model engineering platform. In Single Sign-On SSO provider configurations lacking an explicit AUTH CHECK setting, a...
PT-2025-47776
Name of the Vulnerable Software and Affected Versions Show Variations as Single Products Woocommerce versions n/a through 2.0 Description An authorization issue exists in the Show Variations as Single Products Woocommerce theme’s woo-show-single-variations-shop-category feature. This allows...
CVE-2025-62346
CVE-2025-62346 affects HCL Glovius Cloud and is described as a Cross-Site Request Forgery (CSRF) vulnerability impacting a single endpoint. The connected sources consistently indicate that an attacker could induce an authenticated user’s browser to perform an unwanted action on a trusted site; no...
EUVD-2025-198270
A Cross-Site Request Forgery CSRF vulnerability was identified in HCL Glovius Cloud. An attacker can force a user's web browser to execute an unwanted, malicious action on a trusted site where the user is authenticated, specifically on one endpoint...
PT-2025-47727
Name of the Vulnerable Software and Affected Versions ELEX WordPress HelpDesk & Customer Ticketing System versions through 3.2.9 Description The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress has an Insecure Direct Object Reference issue. This is due to a lack of...
lasso security update
An update is available for lasso. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The lasso packages provide the Lasso library that implements the Liberty Allian...
Critical: Red Hat Security Advisory: lasso security update
An update for lasso is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Critical: Red Hat Security Advisory: lasso security update
An update for lasso is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...