Lucene search
+L

170020 matches found

CVE
CVE
added 2026/08/24 7:20 p.m.9 views

CVE-2026-78551

RansomLook 's /login endpoint contained two distinct authentication weaknesses exploitable by an unauthenticated remote attacker. First, a timing-based username enumeration was possible because the password hash verification function was only invoked for existing accounts, producing measurably di...

8.8CVSS5.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 7:20 p.m.21 views

CVE-2026-78551 RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts

RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...

8.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/24 7:16 p.m.765 views

espoofer

espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...

9.8CVSS7.8AI score0.02554EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/24 6:46 p.m.139 views

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

7AI score
SaveExploits0
NVD
NVD
added 2026/08/24 6:17 p.m.6 views

CVE-2026-76835

OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the default reverse-proxy configuration. GetRequestURI in pkg/requests/util/util.go prefers that header over the real reque...

9.3CVSS
SaveExploits0References5
NVD
NVD
added 2026/08/24 6:17 p.m.5 views

CVE-2026-71932

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

6.9CVSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.7 views

CVE-2026-71922

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...

8.7CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 5:55 p.m.19 views

CVE-2026-76835

OAuth2 Proxy versions 7.15.2 through 7.15.4 are affected by an authentication bypass via the X-Forwarded-Uri header. When reverse-proxy mode is enabled without trusted_proxy_ip configured, buildTrustedProxyNetSet falls back to 0.0.0.0/0 and ::/0, treating every client as a trusted proxy. An unaut...

9.3CVSS5.4AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/24 5:55 p.m.22 views

CVE-2026-76835 OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set

OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the default reverse-proxy configuration. GetRequestURI in pkg/requests/util/util.go prefers that header over the real reque...

9.3CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/24 5:52 p.m.27 views

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

7.3AI score
SaveExploits0
NVD
NVD
added 2026/08/24 5:18 p.m.7 views

CVE-2026-77915

rConfig Core 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...

9.8CVSS
SaveExploits0References3
NVD
NVD
added 2026/08/24 5:18 p.m.7 views

CVE-2026-66908

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

SaveExploits1References2
NVD
NVD
added 2026/08/24 5:17 p.m.8 views

CVE-2026-15469

The use of hard-coded cryptographic key vulnerability has been identified in the mesh functionality of Deco XE75 v3, XE5300 v3.6 and WE10800 v3.6. A shared RSA-512 mesh group private key is present in the affected firmware and is used by the mesh protocol for node authentication. An attacker who...

7.7CVSS
SaveExploits1References5
EUVD
EUVD
added 2026/08/24 5:08 p.m.7 views

EUVD-2026-64995

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

8.6CVSS6.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/24 5:07 p.m.14 views

CVE-2026-71931

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the tftp_upgrade function. The root cause is insufficient filtering of the filename field before it is concatenated into a system command, allowing a remote attacker to execute arbitrary commands with roo...

8.6CVSS6AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 5:07 p.m.25 views

CVE-2026-71924 DrayTek VigorSwitch Multiple Models OS Command Injection via getVid

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

8.6CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 5:07 p.m.10 views

CVE-2026-71922

Multiple DrayTek VigorSwitch models are affected by a pre-authentication null pointer dereference in the setget.cgi interface. The root cause is missing validation when the pass field is absent from a request, allowing a remote unauthenticated attacker to crash the service via a crafted request, ...

8.7CVSS5.4AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 5:07 p.m.28 views

CVE-2026-71922 DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...

8.7CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 5:07 p.m.8 views

EUVD-2026-64981

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...

8.7CVSS5.6AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 5:07 p.m.6 views

EUVD-2026-64980

Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering of the pass field before command execution. A remote attacker can trigger this vulnerability via crafted input to...

9.3CVSS6.2AI score
SaveExploits0References2
Rows per page
Query Builder