Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4655

Malicious code in bioql PyPI...

5CVSS6.6AI score0.00248EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/20 12:24 a.m.5 views

CVE-2024-57056

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

5.4CVSS6.7AI score0.00248EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/20 12:24 a.m.3 views

CVE-2024-57055

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client not the general-use JSON services and requires reverse...

5CVSS6.6AI score0.00248EPSS
Exploits0References1
NVD
NVD
added 2025/02/18 7:15 p.m.5 views

CVE-2024-57055

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client not the general-use JSON services and requires reverse...

5CVSS0.00248EPSS
Exploits0References1
NVD
NVD
added 2025/02/18 7:15 p.m.5 views

CVE-2024-57056

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

5.4CVSS0.00248EPSS
Exploits0References1
CVE
CVE
added 2025/02/18 12:0 a.m.47 views

CVE-2024-57055

CVE-2024-57055 affects WombatDialer prior to version 25.02. The issue is a server-side access control bypass that could allow unauthorized users to call certain client-only services, with the exploit requiring reverse engineering of a proprietary serialization protocol. Impact is limited to clien...

5CVSS6.7AI score0.00248EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/18 12:0 a.m.8 views

CVE-2024-57055

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client not the general-use JSON services and requires reverse...

0.00248EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/18 12:0 a.m.8 views

CVE-2024-57056

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

0.00248EPSS
Exploits0References1
Rows per page
Query Builder