CPE

Cpe:2.3:a:vlife:vlife::::::::

1 brief RSS

Authentication Bypass in vlife via Hardcoded JWT Signing Key

The vlife application through version 2.0.1 contains a hardcoded HS256 JWT signing key in TokenUtil, allowing unauthenticated attackers to forge tokens and gain administrative privileges.

vlife

2t 1c 2h ago

Cpe:2.3:a:vlife:vlife:*:*:*:*:*:*:*:*

Authentication Bypass in vlife via Hardcoded JWT Signing Key

Cpe:2.3:a:vlife:vlife::::::::