CVE-2025-27955 – Clinical Collaboration Platform Session Token Weakness (Authentication Bypass)

June 2, 2025

CVE ID : CVE-2025-27955

Published : June 2, 2025, 6:15 p.m. | 1 hour, 9 minutes ago

Description : Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-5086 – DELmia Apriso Deserialization Remote Code Execution

Next Article CVE-2025-27956 – WebLaudos Directory Traversal Information Disclosure

Highlights

CVE-2025-48381 – CVAT Information Disclosure Vulnerability

May 30, 2025

CVE ID : CVE-2025-48381

Published : May 30, 2025, 4:15 a.m. | 48 minutes ago

Description : Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. In versions starting from 2.4.0 to before 2.38.0, an authenticated CVAT user may be able to retrieve the IDs and names of all tasks, projects, labels, and the IDs of all jobs and quality reports on the CVAT instance. In addition, if the instance contains many resources of a particular type, retrieving this information may tie up system resources, denying access to legitimate users. This issue has been patched in version 2.38.0.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-27955 – Clinical Collaboration Platform Session Token Weakness (Authentication Bypass)

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

In MCP era API discoverability is now more important than ever

Universally Instance-Optimal Mechanisms for Private Statistical Estimation

CVE-2025-48708 – Artifex Ghostscript Argument Injection Vulnerability

CVE-2025-42974 – SAP Function Module Remote Information Disclosure Vulnerability

CVE-2025-48381 – CVAT Information Disclosure Vulnerability

A new frontier in HPC with “Bring Your Own Code”

CVE-2025-39470 – ThimPress Ivy School PHP Local File Inclusion Vulnerability

Classic WTF: Take the Bus

CVE-2025-27955 – Clinical Collaboration Platform Session Token Weakness (Authentication Bypass)

Related Posts