The vulnerability of the software platform based on Git for collaborative code development in GitLab Enterprise Edition is related to deficiencies in the authentication process, which allows a malicious actor to execute pipeline tasks under the name of any user.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute pipeline tasks on behalf of any user...

Authentication flaw

TOTOLINK X6000R V9.4.0cu.852B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication...

The vulnerability of the Telnet service of the Extreme Networks Switch Engine (EXOS) operating system, a micro-programmed software for Extreme Networks network switches, allows attackers to enhance their privileges.

The vulnerability of the Telnet service of the Extreme Networks Switch Engine EXOS operating system, a microprogrammed software network switch from Extreme Networks, is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their...

ColumbiaSoft Document Locator Security Vulnerability

ColumbiaSoft Document Locator is a document management system from ColumbiaSoft. A security vulnerability exists in ColumbiaSoft Document Locator versions prior to 7.2 SP4, which stems from the parameter Server in file/api/authentication/login can lead to incorrect authentication...

Authentication flaw

Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthorized access to the affected device with administrative privileges...

Authentication flaw

Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

Authentication flaw

Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service or theft of database login credentials...

Authentication flaw

Missing authentication in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student and teacher data by unauthenticated attackers...

Authentication flaw

Missing authentication in the GetLogFiles method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of sensitive log files by unauthenticated attackers...

Authentication flaw

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB Android Debug Bridge protocol exposed on...

Authentication flaw

Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

Palantir Security Breach

Palantir is a data platform from US-based Palantir that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A security vulnerability exists in Palantir Tiles1 versions prior to 4.326.0 that stems from a lack of authentication and...

The vulnerability of the JWT Secret Handler component in the cloud operating system CasaOS allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the JWT Secret Handler component in the cloud operating system CasaOS is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges...

The vulnerability of the httpd component’s debug credentials in the microprogramming-based industrial Wi-Fi routers Yifan YF325, due to security flaws in the authentication process, allows attackers to bypass the authentication mechanism.

The vulnerability of the httpd component’s debug credentials in the microprogramming-based industrial Wi-Fi routers Yifan YF325 is related to security flaws in the system. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...

CVE-2022-24400

A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero...

TETRA BURST Security Vulnerability

TETRA BURST is a terrestrial trunked radio standard for radio communications from TETRA BURST. A security vulnerability exists in TETRA BURST that stems from a flaw in the authentication algorithm, which can be exploited by an attacker to set the derived cipher DCK to 0. The vulnerability is caus...

MB connect line mbCONNECT24 and mymbCONNECT24 Security Vulnerabilities

MB connect line mbCONNECT24 and MB connect line mymbCONNECT24 are both products of the German company MB connect line. mb connect line mbCONNECT24 is a set of remote service portals. It supports remote access, data logging and alarms. mb connect line mymbCONNECT24 is an in-house remote maintenanc...

The vulnerability of the FortiOS operating system, related to authentication flaws, allows attackers to escalate their privileges.

The vulnerability of the FortiOS operating system is related to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

Authentication flaw

An issue was discovered in /fcgi/scrutfcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results...

Authentication flaw

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the device resulting in rpd to crash causing a Denial of Service DoS. Continued receipt and processing of this packet will create...