456 matches found
CVE-2026-1453: Missing Authentication for Critical Function
A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product...
PT-2026-5327
Name of the Vulnerable Software and Affected Versions KiloView Encoder Series affected versions not specified Description A missing authentication check for a critical function in KiloView Encoder Series allows an unauthenticated attacker to create or delete administrator accounts. Successful...
CVE-2025-21589: Authentication Bypass Using an Alternate Path or Channel
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass authentication and take administrative control of the device. This issue affects Session Smart Router: from 5.6.7 before 5.6.17, from...
CVE-2025-59961
An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to write to the Unix socket used to manage the jdhcpd process, resulting in complete control over the...
CVE-2026-22640
...
Incorrect Authorization
org.apache.streampipes:streampipes-parent is vulnerable to Incorrect Authorization. The vulnerability is due to a flaw in the user ID creation and JWT handling mechanism, which allows a non-administrator attacker to manipulate tokens and swap usernames with an administrator, thereby gaining full...
CVE-2025-47411: Improper Privilege Management
A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator. This vulnerability allows an attacker to gain administrative control over...
CVE-2025-67418
ClipBucket version 5.5.2 is vulnerable to an improper access control issue due to the use of hardcoded default administrative credentials (CWE-798). An unauthenticated remote attacker can exploit this by logging into the administrative panel using these default credentials to gain full administra...
CVE-2025-67418: Use of Hard-coded Credentials
ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative...
CVE-2025-34428 MailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV
MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local...
CVE-2025-7044: Improper Privilege Management
An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update websocket request and inject the issuperuser property set to true. The server improperly validates this input, allowing the attacker to...
EUVD-2025-199763
An unauthenticated administrative access vulnerability exists in the open-source HashTech project https://github.com/henzljw/hashtech 1.0 thru commit 5919decaff2681dc250e934814fc3a35f6093ee5 2021-07-02. Due to missing authentication checks on /adminindex.php, an attacker can directly access the...
CVE-2025-6949: Execution with Unnecessary Privileges
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to...
PT-2025-42579
Name of the Vulnerable Software and Affected Versions Moxa network security appliances and routers affected versions not specified Description An authorization flaw exists in the API of Moxa network security appliances and routers. An authenticated, low-privileged user can create a new...
EUVD-2015-0688
Malware in sbrugna...
EUVD-2019-15459
Malware in sbrugna...
EUVD-2017-14634
Malware in sbrugna...
EUVD-2014-2962
Malware in sbrugna...