#wwwlike
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-101240
📊 9.3/10
🏢 wwwlike

📝 vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signin...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101240

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 7:03 PM
stackflag.bsky.social
CVE-2026-110612 - vlife
Versions of vlife up to 2.0.1 contain a hard‑coded signing key that lets anyone create a valid login token. An attacker could craft a token that claims super‑user rights and then access…

Too many irrelevant or confusing CVEs? Use stackflag.com

#vlife #wwwlike #CVE #infosec
CVE-2026-110612: vlife up to 2.0.1 lets attackers gain admin access
Versions of vlife up to 2.0.1 contain a hard‑coded signing key that lets anyone create a valid login token.
stackflag.com
October 14, 2026 at 3:30 PM
vulnerability-lookup.social.circl.lu.ap.brid.gy
You can now share your thoughts on vulnerability CVE-2025-13266 in Vulnerability-Lookup:
https://vulnerability.circl.lu/vuln/CVE-2025-13266

wwwlike - vlife

#vulnerabilitylookup #vulnerability #cybersecurity #bot
cvelistv5 - CVE-2025-13266
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
vulnerability.circl.lu
November 17, 2025 at 6:39 AM
cve.skyfleet.blue
CVE-2025-13266 - wwwlike vlife VLifeApi SysFileApi.java create path traversal
CVE ID : CVE-2025-13266

Published : Nov. 17, 2025, 6:15 a.m. | 34 minutes ago

Description : A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the funct...
CVE-2025-13266 - wwwlike vlife VLifeApi SysFileApi.java create path traversal
A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed publicly …
cvefeed.io
November 17, 2025 at 7:09 AM