CVE-2021-41580

The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token. This is exploitable in certain use cases where an OAuth identity provider uses an HTTP 200 status code for authentication-failure error reports, and an application grants...

Trend Micro ServerProtect Authorization Issues Vulnerability

Trend Micro ServerProtect is an enterprise-grade anti-virus program from Trend Micro, Inc. It is used to protect network-connected storage systems and block threats at the source. Trend Micro ServerProtect suffers from an authorization problem vulnerability that originates from an error in the...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to authentication errors, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

Siemens SIPROTEC 5输入验证错误漏洞

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. Siemens SIPROTEC 5 suffers from an Input Authentication Error vulnerability that arises from incoming webpackets that are not handled correctly. An unauthenticated, remote attacker with access to any Ethernet interface could explo...

mod_auth_openidc 输入输入验证错误漏洞

modauthopenidc is a software application. It is an authentication/authorization module for the Apache 2.x HTTP server, used as an OpenID Connect dependency to authenticate users according to the OpenID Connect provider. modauthopenidc is an authentication/authorization module for the Apache 2.x...

Actions ATS2815输入验证错误漏洞

The Actions ATS2815 is a Bluetooth chip from Actions. The Actions ATS2815 suffers from an Input Authentication Error vulnerability that stems from the Bluetooth Classic implementation on the Actions ATS2815 and ATS2819 chipsets failing to correctly handle the receipt of LMPhostconnectionreq...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 220 Series Smart Switches allows a attacker to execute arbitrary commands.

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 220 Series Smart Switches is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

MikroTik RouterOS Assertion Failure Vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by MikroTik Latvia.An assertion failure vulnerability exists in MikroTik RouterOS, which stems from an authentication error in the product's /ram/pckg/security/nova/bin/ipsec process. An attacker could exploit this vulnerability...

Exploit for SQL Injection in Virtuasoftware Cobranca

My CVEs Collection of PoC to my C...

MikroTik RouterOS 代码问题漏洞

MikroTik RouterOS is a Linux-based router operating system developed by MikroTik Latvia.An assertion failure vulnerability exists in MikroTik RouterOS, which stems from an authentication error in the product's /ram/pckg/security/nova/bin/ipsec process. An attacker could exploit this vulnerability...

The vulnerability of the software used to create the private virtual network astra-openvpn-server lies in errors in the authentication process, which allow a perpetrator to cause service interruptions.

The software vulnerability related to the creation of a private virtual network, astra-openvpn-server, is caused by an error in certificate rehydration. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

WESEEK GROWI Access Control Error Vulnerability (CNVD-2021-43487)

Weseek GROWI is a suite of team collaboration software from Weseek Japan. An access control error vulnerability exists in WESEEK GROWI that originates from an error in the handling of authentication requests. A remote, authenticated attacker could exploit the vulnerability to view unauthorized...

SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability

SAP NetWeaver ABAP Server is an application server for ABAP Advanced Business Application Programming. SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability can be exploited by remote attackers to submit special requests, bypass security restrictions, and gain unauthorized...

Cisco 多款产品命令注入漏洞

Cisco Small Business is a switch from Cisco USA. A command injection vulnerability exists in multiple Cisco products and results from incorrect authentication provided to the user. An attacker could exploit this vulnerability to perform command injection in an attack on an affected device. The...

Dell EMC iDRAC9 Authentication Error Vulnerability

Dell EMC iDRAC9 is a system management solution comprising hardware and software from Dell USA. The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems. An authentication error vulnerability exists in Dell EMC iDRAC9 versions prior to 4.40.00.00...

Oracle Coherence Input Validation Error Vulnerability (CNVD-2021-33847)

Oracle Coherence is an application from Oracle Corporation. It provides fast access to frequently used data to enable predictable scaling of mission-critical applications. Oracle Coherence Core 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 suffers from an Input Authentication Error...

Oracle Coherence 输入验证错误漏洞

Oracle Coherence is an application from Oracle Corporation. It provides fast access to frequently used data to enable predictable scaling of mission-critical applications. Oracle Coherence Core 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 suffers from an Input Authentication Error...

Bitdefender Safepay Access Control Error Vulnerability

Bitdefender SafePay is a secure browser. The Access Control Error vulnerability, which previously existed in Bitdefender Safepay version 25.0.7.29, stems from an Authentication Error vulnerability in Bitdefender Safepay, which can be exploited by an attacker to manipulate the browser's file uploa...

The vulnerability of Huawei AR3200 router’s micro-programming software, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of Huawei AR3200 router’s micro-programming software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

iOS Enrollment - Remote Management on DEP devices: Your credentials are either missing or wrong. Try again

When authenticating in Remote Management page the AD user cannot authenticate. Then it gets an error message: Your credentials are either missing or wrong. Try again...