Lucene search
+L

82 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2016-6038

Malware in sbrugna...

7.8CVSS7.8AI score0.03864EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-11572

Malware in sbrugna...

8.1CVSS8.3AI score0.01763EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/06/06 12:0 a.m.12 views

The vulnerability of the “Tab Strip” control element in the Google Chrome browser allows a hacker to replace the user interface.

The vulnerability of the Tab Strip control element in Google Chrome relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML link...

6.4CVSS5.9AI score0.00366EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.9 views

The vulnerability of the high-performance server system HPE Cray XD670, related to bypassing authentication through spoofing, allows a perpetrator to trigger a service failure.

The vulnerability of the high-performance server system HPE Cray XD670 relates to bypassing authentication through spoofing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

10CVSS5.5AI score
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/04/08 5:23 p.m.16 views

CVE-2025-26644 Windows Hello Spoofing Vulnerability

...

5.1CVSS7.2AI score0.00525EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.5 views

Fleet 授权问题漏洞

Fleet is an open source device management platform from Fleet that supports a wide range of operating systems and devices to help IT and security teams with device management, vulnerability reporting, MDM, and more, free and flexible. An authorization issue vulnerability exists in Fleet versions...

9.3CVSS9.2AI score0.00623EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/18 12:0 a.m.9 views

TP-LINK Archer C20 安全漏洞

TP-LINK Archer C20 is a router from China P&L TP-LINK. A security vulnerability exists in TP-LINK Archer C20 version V6.6230412 and prior versions. An attacker exploiting this vulnerability could add Referer: http://tplinkwifi.net to a request to be recognized as authenticated...

9.8CVSS8.7AI score0.03211EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/07 4:31 p.m.12 views

CVE-2025-1104 D-Link DHP-W310AV authentication spoofing

A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS7.4AI score0.02934EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/02/07 4:31 p.m.16 views

CVE-2025-1104 D-Link DHP-W310AV authentication spoofing

A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS0.02934EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.42 views

Security Bulletin: Vulnerability in Apache ZooKeeper ( CVE-2024-51504) affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary A potential security bypass vulnerability CVE-2024-51504 has been identified related to Apache ZooKeeper that affects IBM watsonx Assistant for IBM Cloud Pak for Data. This vulnerability have been addressed. Refer to details for additional information. Vulnerability Details...

9.1CVSS6.2AI score0.00924EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.1 views

PT-2025-1214 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a spoofing vulnerability in the NTLM protocol of the Windows operating system, which is associated with a disruption in the data protection mechanism. This could all...

7.8CVSS9.2AI score0.0191EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/11/12 10:32 a.m.11 views

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...

9CVSS7.2AI score0.14859EPSS
SaveExploits2References10
RedHat Linux
RedHat Linux
added 2024/07/31 10:40 a.m.8 views

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...

9CVSS7.2AI score0.14859EPSS
SaveExploits2References10
RedHat Linux
RedHat Linux
added 2024/07/31 10:30 a.m.8 views

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...

9CVSS7.2AI score0.14859EPSS
SaveExploits2References10
RedHat Linux
RedHat Linux
added 2024/07/25 3:53 p.m.8 views

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...

9CVSS7.2AI score0.14859EPSS
SaveExploits2References10
BDU FSTEC
BDU FSTEC
added 2024/06/19 12:0 a.m.7 views

The vulnerability of the access control function of the Snort intrusion detection system allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the access control function of the Snort intrusion detection system is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

5.8CVSS5.4AI score0.00366EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2024/06/04 12:25 p.m.33 views

CVE-2023-51543 WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects RegistrationMagic: from n/a through 5.2.5.0...

5.3CVSS5.3AI score0.00376EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.5 views

PT-2024-21197 · WordPress · Wp Happy Coders Comments Like Dislike

Name of the Vulnerable Software and Affected Versions: WP Happy Coders Comments Like Dislike versions 1.2.2 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, which allows functionality bypass. Recommendations: For versions 1.2.2 and earlier, upda...

4.3CVSS9.5AI score0.00395EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:12 a.m.4 views

SUSE CVE-2019-11234

FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497...

6.8CVSS9.5AI score0.07624EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.8 views

CVE-2022-35770

Windows NTLM Spoofing Vulnerability...

6.5CVSS6.7AI score0.01513EPSS
SaveExploits0References3Affected Software25
Rows per page
Query Builder