Lucene search
+L

23 matches found

Packet Storm News
Packet Storm News
•added 2026/07/14 12:00 a.m.•14 views

AI in Cyberpsychology: A Systematic Literature Review of Cybersecurity Enhancement by Using AI for Analyzing Psychology of Victims, Attackers, and Defenders

Cybersecurity is the practice of protecting systems, networks, and data from digital attacks. Cyberpsychology CPSY is defined as the use of psychology to enhance cybersecurity applications. Since the early 2010s, the evolution of Artificial Intelligence AI has increasingly integrated with CPSY,...

6.1AI score
SaveExploits0
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•19 views

ADB Explorer 安全漏洞

ADB Explorer is a ADB user interface developed by Alex B as an individual developer. Versions of ADB Explorer prior to 0.9.26020 contain security vulnerabilities. These vulnerabilities stem from the lack of verification of the integrity or authenticity of the ADB binary path before execution, whi...

7.8CVSS6.1AI score0.00206EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/09 8:48 p.m.•49 views

CVE-2026-25810 PlaciPy is Missing Object-Level Authorization in student.submission.routes.ts

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/student.submission.routes.ts verify authentication but fails to enforce object-level authorization ownership checks...

5.3CVSS0.00505EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/09 12:00 a.m.•25 views

PT-2026-7156

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/student.submission.routes.ts verify authentication but fails to enforce object-level authorization ownership checks...

5.3CVSS5.5AI score0.00505EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/06 6:46 a.m.•50 views

CVE-2025-10753

CVE-2025-10753 affects the WordPress plugin WordPress OAuth Single Sign On – SSO (OAuth Client). All versions up to 6.26.14 are vulnerable due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the oauthredirect option parameter, allowi...

5.3CVSS5.6AI score0.00376EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2008-0401

Malware in sbrugna...

7.5CVSS6.4AI score0.02252EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-21738

Malware in sbrugna...

7.8CVSS7.3AI score0.00152EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/05 11:14 p.m.•24 views

CVE-2022-32251

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. There is a missing authentication verification for a resource used to change the roles and permissions of a user. This could allow an attacker to change the permissions of any user and gain the privileges of an...

9.8CVSS7.1AI score0.01214EPSS
SaveExploits0References1
CERT
CERT
•added 2024/07/09 12:00 a.m.•122 views

RADIUS protocol susceptible to forgery attacks.

Overview A vulnerability in the RADIUS protocol allows an attacker allows an attacker to forge an authentication response in cases where a Message-Authenticator attribute is not required or enforced. This vulnerability results from a cryptographically insecure integrity check when validating...

9CVSS8.2AI score0.14859EPSS
SaveExploits2References4
CVE
CVE
•added 2024/06/14 2:30 p.m.•88 views

CVE-2024-37368

Summary (CVE-2024-37368) Rockwell Automation FactoryTalk View SE is affected by an improper authentication vulnerability that allows a remote user with FTView to send a packet from a remote system to view an HMI project. Affected product: FactoryTalk View SE, version v11.0 (confirmed by ICSA advi...

8.2CVSS6.6AI score0.00498EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/06/14 2:17 p.m.•91 views

CVE-2024-37367

Rockwell Automation FactoryTalk View SE is affected (v12.0). The vulnerability is an improper authentication issue (CWE-287) that could allow a remote attacker to have a user view an HMI project by sending a packet to the server. Connected advisories confirm affected product and remediation path:...

8.2CVSS7.4AI score0.00498EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/03/15 9:12 a.m.•17 views

CVE-2024-2450

Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctly verify account ownership when switching from email to SAML authentication, allowing an authenticated attacker to take over other user accounts via a crafted switch request und...

8.8CVSS8.4AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/02/14 12:00 a.m.•15 views

The vulnerability of the XWiki Admin Tools administrative tool of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows a perpetrator to execute arbitrary commands.

The vulnerability of the XWiki Admin Tools administrative tool, a component of the XWiki Platform for creating collaborative web applications, is related to insufficient verification of the authenticity of executed queries. Exploiting this vulnerability could allow a malicious actor, operating...

10CVSS8AI score0.22938EPSS
SaveExploits2References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•11 views

PT-2023-4949

Name of the Vulnerable Software and Affected Versions Certifi versions prior to 2023.07.22 Description The issue is related to the recognition of "e-Tugra" root certificates by Certifi, a collection of Root Certificates for validating SSL certificates. e-Tugra's root certificates were subject to ...

9.8CVSS8.1AI score0.00568EPSS
SaveExploits0References54
Vulnrichment
Vulnrichment
•added 2022/06/14 9:22 a.m.•9 views

CVE-2022-32251

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. There is a missing authentication verification for a resource used to change the roles and permissions of a user. This could allow an attacker to change the permissions of any user and gain the privileges of an...

8.8CVSS9.6AI score0.01214EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/04/13 12:00 a.m.•16 views

The vulnerability lies in the implementation of the TrustManager library’s authentication verification technology for creating Spring Cloud Gateway API gateways. This allows attackers to access remote services.

The vulnerability of the implementation of the TrustManager library for creating Spring Cloud Gateway API gateways is related to errors in the authentication process. Exploiting this vulnerability can allow attackers to access remote services...

5.3CVSS6.6AI score0.04846EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2019/10/08 1:15 p.m.•35 views

CVE-2019-13336

The dbell Wi-Fi Smart Video Doorbell DB01-S Gen 1 allows remote attackers to launch commands with no authentication verification via TCP port 81, because the loginuse and loginpass parameters to openlock.cgi can have arbitrary values. NOTE: the vendor's position is that this product reached end o...

9.8CVSS9.8AI score0.02856EPSS
SaveExploits1References3
Citrix
Citrix
•added 2018/01/12 12:00 a.m.•18 views

Configure "Authentication Verification Order" Different to the Order Prompted on Logon Page Using NetScaler nFactor

This article describes how to configure "authentication verification order" different to the order prompted on logon page Using NetScaler nFactor. Background The following is the authentication field prompt order of the NetScaler Gateway logon page: 1. Login 2. Domain password 3. One-time passwor...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2015/07/26 12:00 a.m.•1 views

PT-2015-6022

Name of the Vulnerable Software and Affected Versions Research Artisan Lite versions prior to 1.18 Description The issue allows remote attackers to perform unspecified actions due to a lack of authentication verification. Recommendations For Research Artisan Lite versions prior to 1.18, update to...

5CVSS0.01344EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2010/04/14 12:00 a.m.•46 views

Microsoft Windows Authentication Verification Remote Code Execution Vulnerability (981210)

This host is missing a critical security update according to Microsoft Bulletin MS10-019. OpenVAS Vulnerability Test $Id: secpodms10-019.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Authentication Verification Remote Code Execution Vulnerability 981210 Authors: Veerendra G Updated B...

9.3CVSS0.3AI score0.24216EPSS
SaveExploits2References2
Rows per page
Query Builder