1557 matches found
WordPress WP 2FA Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)
Software WP 2FA Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32568 Patch priority Medium CVSS severity Medium 7.1 Developer Melapress PSID d4b67294d441 Credits Rafie Muhammad Patchstack Required privilege...
HackerOne: 2fa can't be activated on app.pullrequest.com
Vulnerability description not provided...
CVE-2024-31136
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter...
CVE-2024-31136
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter...
CVE-2024-31136
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter...
CVE-2024-31136
CVE-2024-31136 affects JetBrains TeamCity prior to 2024.03. The issue allows bypassing two-factor authentication by supplying a special URL parameter, due to improper input validation on the authentication flow. The estimated impact under CVSS shows high confidentiality and integrity impact with ...
CVE-2024-31136: Improper Validation of Consistency within Input
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter...
CVE-2022-44595
Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0...
CVE-2022-44595
CVE-2022-44595 : WordPress WP2FA plugin
PT-2024-11683
Name of the Vulnerable Software and Affected Versions Melapress WP 2FA versions n/a through 2.2.0 Description The issue is related to an Improper Authentication vulnerability that allows Authentication Bypass in Melapress WP 2FA. Recommendations For Melapress WP 2FA versions n/a through 2.2.0,...
CVE-2022-44595: Improper Authentication
Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0...
Ukraine Arrests Trio for Hijacking Over 100 Million Email and Instagram Accounts
The Cyber Police of Ukraine has arrested three individuals on suspicion of hijacking more than 100 million emails and Instagram accounts from users across the world. The suspects, aged between 20 and 40, are said to be part of an organized criminal group living in different parts of the country. ...
Store manager admits SIM swapping his customers
A 42-year-old manager at an unnamed telecommunications company has admitted SIM swapping customers at his store. SIM swapping, also known as SIM jacking, is the act of illegally taking over a target’s cell phone number and re-routing it to a phone under the attackers control. Once an attacker has...
django-restframework-2fa (>=0.0.15, <=0.0.16), los-docusign (0.2.2) +2 more potentially affected by CVE-2024-22513 via djangorestframework-simplejwt (4.6.0)
djangorestframework-simplejwt PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework-simplejwt and may be impacted: - django-restframework-2fa =0.0.15, =0.0.16 - los-docusign 0.2.2 - tea-django 0.0.14 - traktor 0.0.10...
CVE-2024-24770
vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. Much like GHSA-45gq-q4xh-cp53, it is possible to find which usernames exist in vantage6 by calling the API routes "/recover/lost" and...
CVE-2024-24770: Concurrent Execution using Shared Resource with Improper Synchronization
vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. Much like GHSA-45gq-q4xh-cp53, it is possible to find which usernames exist in vantage6 by calling the API routes /recover/lost and /2fa/lost...
BIT-GITLAB-2020-13289
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activated...
BIT-GITLAB-2020-13307
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not revoking current user sessions when 2 factor authentication was activated allowing a malicious user to maintain their access...