Exploit for Incorrect Implementation of Authentication Algorithm in Microsoft

🛑 Microsoft SharePoint: CVE-2023-29357 🛑 Microsoft SharePo...

The vulnerability of TP-LINK’s TL-ER5120G router software, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of TP-LINK’s TL-ER5120G router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the remote access software for devices on the Digi RealPort network lies in the use of a password hash instead of a plain-text password for authentication. This allows attackers to compromise the target system.

The vulnerability of the remote access software for devices on the Digi RealPort network relates to the use of a password hash instead of a plain-text password for authentication. Exploiting this vulnerability allows an attacker to compromise the target system remotely...

CVE-2023-31015

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service...

Authentication flaw

ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the...

Authentication flaw

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerabili...

CVE-2023-41965

CVE-2023-41965 affects Socomec MODULYS GP (MOD3GP-SY-120K) Web firmware v01.12.10. The issue is insecure storage of sensitive information due to lack of authentication security, enabling information disclosure via web requests. Public exploitation details are not provided in the documents. PT-202...

The vulnerability of the XML-RPC protocol implementation in the network printing control software PaperCut NG allows a hacker to execute arbitrary commands.

The vulnerability of the XML-RPC protocol implementation in the PaperCut NG network printing control software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Authentication flaw

A vulnerability was found in didi KnowSearch 0.3.2/0.3.1.2. It has been rated as problematic. This issue affects some unknown processing of the file /api/es/admin/v3/security/user/1. The manipulation leads to unprotected storage of credentials. The attack may be initiated remotely. The exploit ha...

Authentication flaw

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content...

Authentication flaw

A password management vulnerability in Skyhigh Secure Web Gateway SWG in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authentication information stored in configuration files to be extracted through SWG REST API. This was...

Authentication flaw

Magento LTS is the official OpenMage LTS codebase. Guest orders may be viewed without authentication using a "guest-view" cookie which contains the order's "protectcode". This code is 6 hexadecimal characters which is arguably not enough to prevent a brute-force attack. Exposing each order would...

Authentication flaw

?The affected product does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0...

TheHive Authorization Issues Vulnerability

TheHive is a scalable open source security incident response platform. A security vulnerability exists in StrangeBee TheHive that stems from a vulnerability that allows an attacker to gain privileges through the Active Directory authentication mechanism. Affected products and versions: StrangeBee...

The vulnerability affects the SSO implementation of the Cisco BroadWorks collaboration platform and Cisco BroadWorks Xtended Services software. This allows a hacker to gain full access to the vulnerable platform.

The vulnerability of the SSO implementation for Cisco BroadWorks collaborative work platforms and Cisco BroadWorks Xtended Services software involves deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full access to the vulnerable...

Authentication flaw

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

Important: php8.1

Issue Overview: GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixed in 8.2.7, 8.1.20, 8.0.29 NOTE: https://github.com/php/php-src/security/advisories/GHSA-76gg-c692-v2mw NOTE:...

Fortinet FortiSwitchManager 安全漏洞

Fortinet FortiSwitchManager is a network switch management tool from Fortinet designed to help organizations manage their FortiSwitch family of network switches. An improper access control vulnerability exists in Fortinet FortiSwitchManager. The vulnerability is caused by a flawed authentication...

The vulnerability of the Apache Shiro framework, related to defects in the authentication process, allows attackers to bypass existing security restrictions.

The vulnerability of the Apache Shiro framework is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

Authentication flaw

A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause the affected system to stop processing RADIUS packets. This vulnerability is due to improper handling of certain RADIUS accounting requests. An...