CVE-2026-51937

A vulnerability in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information . The flaw is associated with the RestApiController.java , JsApiTicketComponent.java , and GetAccessTokenComponent.java components. While the impact is identified as HIGH for confidentiality with a CVSS3.1 ...

EUVD-2024-53641

Malicious code in bioql PyPI...

An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component.

...

CVE-2025-50708

A security vulnerability exists in Perplexity AI GPT-4 v.2.51.0 (and the associated Web Application) due to the mishandling of the token component in shared chat URLs. This flaw allows a remote attacker to obtain sensitive information , classified as an exposure of sensitive information to an una...

CVE-2025-50708: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat URL...

CVE-2025-50708

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat URL...

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

MaysWind ezBookkeeping has Improper Privilege Management

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

GHSA-MPG8-8X9C-P9GV MaysWind ezBookkeeping has Improper Privilege Management

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component . The vulnerability is associated with CWE-276 (Incorrect Default Permissions). While the technical root cause is not detailed in the provided documents, the security metrics indicate ...

ezBookkeeping 安全漏洞

ezBookkeeping is a lightweight personal bookkeeping application by mayswind individual developers. A security vulnerability exists in ezBookkeeping version 0.7.0, which stems from a vulnerability contained in the token component that results in an elevation of privilege vulnerability...

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

PT-2025-6753 · Mayswind · Mayswind Ezbookkeeping

Name of the Vulnerable Software and Affected Versions: MaysWind ezBookkeeping version 0.7.0 Description: An issue in MaysWind ezBookkeeping allows a remote attacker to escalate privileges via the token component. Recommendations: For MaysWind ezBookkeeping version 0.7.0, consider disabling the...

CVE-2024-57604: Incorrect Default Permissions

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

SUSE CVE-2024-33394

An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...

GHSA-WCCG-V638-J9Q2 karmada vulnerable to arbitrary code execution via a crafted command

An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...

karmada vulnerable to arbitrary code execution via a crafted command

An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...