Apache Kylin authorization issue vulnerability

A security vulnerability exists in Apache Kylin versions 5 through 5.0.4. This vulnerability stems from the lack of authentication in the backend cache API, making it susceptible to SQL injection attacks that could lead to the execution of malicious SQL statements...

Niefy wx-api authorization issue vulnerability

Niefy wx-api versions 0.8.2 and earlier have an authorization issue vulnerability. This vulnerability stems from an authentication bypass flaw, allowing unverified attackers to impersonate WeChat fans by providing the original openid cookie to fan-oriented controllers. These attackers can then ca...

Microsoft Authentication Library for Node.js Input Validation Vulnerability

The Microsoft Authentication Library for Node.js has a vulnerability related to input validation errors. This vulnerability stems from source validation errors, which may allow unauthorized attackers to leak information through the network...

Lenovo Idea Tab Pro (TB373FU) licensing issues and vulnerabilities

The Lenovo Idea Tab Pro TB373FU has an authorization issue vulnerability. This vulnerability stems from an authentication bypass, which may allow users with physical access rights to access the device without proper authorization...

JoeyZhou Xiaozhi ESP32 Server Java Authorization Vulnerability

JoeyZhou Xiaozhi ESP32 Server Java 6.1.0 and earlier versions have an authorization issue. This vulnerability stems from an authentication bypass. Unverified attackers can obtain a valid device WebSocket token by making a request to/api/device/ota with any MAC address. This allows them to open th...

FastapiAdmin authorization issue vulnerability

In FastAPIAdmin versions 3.0 and earlier, there is an authorization issue vulnerability. This vulnerability stems from the lack of protection for the automatic login endpoint. Unauthorized attackers can list users through /api/v1/auth/auto-login/users, obtain the superuser automatic login token,...

mlogclub bbs-go authorization issue vulnerability

The mlogclub bbs-go versions 4.4.6 and earlier have an authorization issue vulnerability. This vulnerability stems from the lack of verification of the aud claim in the /api/login/googleonetap endpoint, allowing authentication bypass. Attackers can replay victim’s tokens to log in with the victim...

Cassio Santos Whaticket Open Source: Permissions, licensing, and access control issues

Cassio Santos Whaticket Open Source versions from cf04795 onwards have vulnerabilities related to permission and access control. These vulnerabilities stem from authentication bypasses. Unauthenticated attackers can register as administrators by omitting the profile field or setting it to ‘admin’...

OpenBMB StaffDeck encryption vulnerabilities

OpenBMB StaffDeck versions 0.5.6 and earlier have an encryption-related vulnerability. This vulnerability stems from an authentication bypass mechanism. The use of a hardcoded default appsecret allows unauthorized attackers to forge administrator session tokens and gain full tenant management...

Mattermost log information leakage vulnerability

Mattermost versions 11.9.1 and earlier of 11.9.x series, 11.8.5 and earlier of 11.8.x series, 11.7.10 and earlier of 11.7.x series, and 11.10.1 and earlier of 11.10.x series have a vulnerability related to log information leakage. This vulnerability arises from the failure to clear the...

FreeRDP resource management error vulnerability

FreeRDP versions from 3.0.0 to 3.32.0 have a resource management vulnerability. This vulnerability stems from an uncontrolled resource consumption issue in the parsenlamodepdu function. Unverified attackers can successfully perform TLS negotiations and send byte streams that do not start with the...

WordPress MiniOrange OTP Login, Verification, and SMS Notifications: Authorization Vulnerability

WordPress miniOrange OTP Login, Verification, and SMS Notifications: Versions prior to 5.5.8 have an authorization issue vulnerability. This vulnerability stems from the modelayotpprocess function, which short-circuits the authentication process before password verification or administrator inten...

Astra Linux – vulnerability in Chromium

UI misrepresentation in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in exim4

In Exim versions prior to 4.99.2, when the SPA authentication driver is used with a malicious SPA resource, it is possible for an out-of-bounds write to crash the connection instance, or for improper data processing to lead to the exposure of data from uninitialized heap memory...

Astra Linux – Vulnerability in Chromium

The use of after free in Web Authentication in Google Chrome before version 149.0.7827.155 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in dovecot

The attacker can use a specially crafted Base64 exchange between Dovecot and the client to forge SCRAM TLS channel bindings. This requires that the attacker be able to position themselves between Dovecot and the client connection. If successful, the attacker can eavesdrop on communications betwee...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP – deriving legacy responder STK authentication from the MITM state The legacy responder path in smprandom currently labels the stored STK as authenticated whenever pendingseclevel is set to BTSECURITYHIGH. This...

Astra Linux – vulnerability in Apache2

A timing attack against modauthdigest in Apache HTTP Server 2.4.66 allows a remote attacker to bypass Digest authentication. Users are advised to upgrade to version 2.4.67, which fixes this issue...

Astra Linux – Vulnerability in Zeromq3

There is a flaw in the zeromq server in versions before 4.3.3, located in src/decoderallocators.hpp. The decoder’s static allocator could have its size changed, but the buffer remains unchanged since it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zero...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: SCTP: The comparison of MACs has been fixed to require constant-time operations. To prevent timing attacks, MACs need to be compared in constant-time. Use the appropriate helper function for this purpose...