Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

1. 33
   CVE NVD 14h ago

   AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline.

   AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which…

   CVSS 9.8 CVE-2026-120209 Anji-Plus

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Anji-Plus&limit=100. RSS for this section: feed.xml.