What are JWT Injections, and Why do You Need to Know About Them

JSON Web Tokens (JWTs for short) are the new standard for transmitting identity information in the digital age. JWTs are JSON objects that act as an identifier for your user or application. They’re u ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

CVE-2022-2569

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate usersRead More ...

Continue Reading
ARC Informatique PcVue

## 1. EXECUTIVE SUMMARY * **CVSS v3 5.5** * **ATTENTION:** Low attack complexity * **Vendor:** ARC Informatique * **Equipment:** PcVue * **Vulnerability: **Cleartext Storage of Sensitive Inf ...

Continue Reading
CVE-2022-34149

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2022-34858

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
This Week in Spring – August 16th, 2022

Hi, Spring fans! Welcome to another wonder-filled installment of _This Week in Spring_! It's been a week! Sometimes I can scarcely believe it myself. And can you believe it's August 16th already?? My ...

Continue Reading
Simple Single Sign On <= 4.1.0 – Authentication Bypass

The plugin leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.Read More ...

Continue Reading
Simple Single Sign On <= 4.1.0 – Authentication Bypass

The plugin leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site. ### PoC The PoC will be displayed on August 23, 2022, to give users the time to upda ...

Continue Reading

Back to Main

Subscribe for the latest news: