https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:06:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-257433 EUVD-2026-257433 https://cve.radiocsirt.org/vuln/euvd-2026-257433 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64386 <p>The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active.</p> <p>The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-64386 https://cve.radiocsirt.org/vuln/ghsa-4m38-cfr7-jx25 <p>The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active.</p> <p>The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active.</p> https://cve.radiocsirt.org/vuln/ghsa-4m38-cfr7-jx25