9 matches found
EUVD-2024-51979
Malicious code in bioql PyPI...
CVE-2024-53484
Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...
CVE-2024-53484
Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...
CVE-2024-53484
Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...
CVE-2024-53484
Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...
Ever Traduora Platform 安全漏洞
Ever Traduora Platform is an open translation management platform from Traduora, Inc. A security vulnerability exists in Ever Traduora Platform version 0.20.0 and earlier, which stems from the use of a hard-coded JWT signing key that could lead to elevated privileges...
CVE-2024-53484
Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...
CVE-2024-53484
The Ever Traduora open translation management platform, versions 0.20.0 and below , is vulnerable to Privilege Escalation . The root cause is the use of a hard-coded JWT signing key , which allows an attacker to gain elevated privileges within the platform. Specific exploit details or proof-of-co...
Exposure of Sensitive Information to an Unauthorized Actor in traduora/traduora
Description Username Enumeration in traduora. Proof of Concept 1. setup traduora to reproduce the vulnerability 2. go to sign in page http://localhost:8080/login 3. Append non registered user email and password it shows Error,resource not found 4. when Appending correct username and fake password...