Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:19:07 +0000 bdu:2023-08951 https://cve.radiocsirt.org/vuln/bdu:2023-08951 bdu:2023-08951 https://cve.radiocsirt.org/vuln/bdu:2023-08951 EUVD-2026-195445 https://cve.radiocsirt.org/vuln/euvd-2026-195445 EUVD-2026-195445 https://cve.radiocsirt.org/vuln/euvd-2026-195445 fkie_cve-2023-48392 https://cve.radiocsirt.org/vuln/fkie_cve-2023-48392 <p>Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can generate valid token parameter and exploit this vulnerability to access system with arbitrary user account, including administrator’s account, to execute login account’s permissions, and obtain relevant information.</p> <p>Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can generate valid token parameter and exploit this vulnerability to access system with arbitrary user account, including administrator’s account, to execute login account’s permissions, and obtain relevant information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-48392 GHSA-wv9r-p2rc-jcrp https://cve.radiocsirt.org/vuln/ghsa-wv9r-p2rc-jcrp <p>Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can generate valid token parameter and exploit this vulnerability to access system with arbitrary user account, including administrator’s account, to execute login account’s permissions, and obtain relevant information.</p> <p>Kaifa Technology WebITR is an online attendance system, it has a vulnerability in using hard-coded encryption key. An unauthenticated remote attacker can generate valid token parameter and exploit this vulnerability to access system with arbitrary user account, including administrator’s account, to execute login account’s permissions, and obtain relevant information.</p> https://cve.radiocsirt.org/vuln/ghsa-wv9r-p2rc-jcrp gsd-2023-48392 https://cve.radiocsirt.org/vuln/gsd-2023-48392 gsd-2023-48392 https://cve.radiocsirt.org/vuln/gsd-2023-48392