2114 matches found
CRMEB security vulnerabilities
CRMEB is a Java mall system that is open source by CRMEB. A security vulnerability exists in CRMEB 5.6.1 and earlier versions, which stems from the JWT HMAC Secret Handler component's use of a hard-coded encryption key for the parameter secret, which could lead to a remote attack...
PT-2025-40806
Name of the Vulnerable Software and Affected Versions CRMEB versions prior to 5.6.2 Description A security issue exists in CRMEB related to the JWT HMAC Secret Handler component. Manipulation of the secret argument with the input default leads to the use of a hard-coded cryptographic key within a...
CVE-2025-9485
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
CVE-2025-9485 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...
RockyLinux 10 : opentelemetry-collector (RLSA-2025:7479)
The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2025:7479 advisory. go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...
WordPress plugin OAuth Single Sign On – SSO (OAuth Client) has a vulnerability related to data manipulation.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A data forgery issue...
EUVD-2024-1892
Malicious code in bioql PyPI...
EUVD-2024-3440
Malicious code in bioql PyPI...
EUVD-2025-32091
Malicious code in bioql PyPI...
EUVD-2025-30532
Malicious code in bioql PyPI...
EUVD-2022-5105
Malicious code in bioql PyPI...
EUVD-2025-27645
Malicious code in bioql PyPI...
EUVD-2023-3317
Malicious code in bioql PyPI...
EUVD-2025-32012
Malicious code in bioql PyPI...
EUVD-2023-34278
Malicious code in bioql PyPI...
EUVD-2024-3127
Malicious code in bioql PyPI...
EUVD-2023-52256
Malicious code in bioql PyPI...
EUVD-2023-38201
Malicious code in bioql PyPI...