https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 15:13:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-214213 EUVD-2026-214213 https://cve.radiocsirt.org/vuln/euvd-2026-214213 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53356 <p>Weak JWT Secret vulnerabilitiy in EasyVirt DCScope &lt;= 8.6.0 and CO2Scope &lt;= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as &#34;somerandomaccesstoken&#34;. A weak HMAC secret poses a risk because attackers can use the predictable secret to create valid JSON Web Tokens (JWTs), allowing them access to important information and actions within the application.</p> <p>Weak JWT Secret vulnerabilitiy in EasyVirt DCScope &lt;= 8.6.0 and CO2Scope &lt;= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as &#34;somerandomaccesstoken&#34;. A weak HMAC secret poses a risk because attackers can use the predictable secret to create valid JSON Web Tokens (JWTs), allowing them access to important information and actions within the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53356 https://cve.radiocsirt.org/vuln/ghsa-5pcx-4fpr-p436 <p>EasyVirt DCScope &lt;=8.6.0 and CO2Scope &lt;=1.3.0 are vulnerable to privilege escalation as the password token suffers from weak encryption making it possible to brute-force the password token.</p> <p>EasyVirt DCScope &lt;=8.6.0 and CO2Scope &lt;=1.3.0 are vulnerable to privilege escalation as the password token suffers from weak encryption making it possible to brute-force the password token.</p> https://cve.radiocsirt.org/vuln/ghsa-5pcx-4fpr-p436