Lucene search
K

811 matches found

CVE
CVE
added 2025/10/27 12:0 a.m.9 views

CVE-2025-61482

The CVE-2025-61482 vulnerability affects privacyIDEA Authenticator for Android (version 4.3.0). A local attacker with root access can bypass two-factor authentication by hooking cryptographic routines and intercepting decryption paths to recover plaintext secrets, enabling generation of valid OTP...

7.2CVSS6.4AI score0.00013EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/27 12:0 a.m.5 views

CVE-2025-61482

Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...

0.00013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.2 views

PT-2025-43966

Name of the Vulnerable Software and Affected Versions privacyIDEA Authenticator version 4.3.0 Description A flaw exists in the handling of OTP/TOTP/HOTP values within the privacyIDEA Authenticator application on Android. A local attacker with root access can bypass two-factor authentication by...

7.2CVSS6.5AI score0.00013EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.2 views

privacyIDEA Authenticator 安全漏洞

privacyIDEA Authenticator is a login authentication application from the privacyIDEA organization. A security vulnerability exists in privacyIDEA Authenticator version 4.3.0 that stems from improper handling of OTP/TOTP/HOTP values, which could allow a local attacker to bypass dual authentication...

7.2CVSS6.6AI score0.00013EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/27 12:0 a.m.2 views

CVE-2025-61482

Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...

6.4AI score0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/27 12:0 a.m.2 views

EUVD-2025-36185

Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...

7.2CVSS6.3AI score0.00013EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/11 12:30 a.m.3 views

EUVD-2025-33792

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

6.5AI score0.0007EPSS
Exploits0References2
NVD
NVD
added 2025/10/10 11:15 p.m.4 views

CVE-2025-8093

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

8.8CVSS0.0007EPSS
Exploits0References1
OSV
OSV
added 2025/10/10 11:15 p.m.1 views

CVE-2025-8093

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

8.8CVSS5.8AI score0.0007EPSS
Exploits0References1
CVE
CVE
added 2025/10/10 10:23 p.m.15 views

CVE-2025-8093

The vulnerability CVE-2025-8093 affects the Drupal Authenticator Login module prior to version 2.1.8. The issue is an authentication bypass via an alternate path or channel, as described across multiple sources, with CVSS v3.1 base metrics indicating high risk (8.8, Network attack vector, Privile...

8.8CVSS6.6AI score0.0007EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/10 10:23 p.m.0 views

CVE-2025-8093 Authenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-098

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

6.6AI score0.0007EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/10 10:23 p.m.4 views

CVE-2025-8093 Authenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-098

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

0.0007EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.2 views

Drupal Authenticator Login 安全漏洞

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login version 0.0.0 through versions prior to 2.1.8 that stems from bypassing authentication using an alternate path or channel, which could...

8.8CVSS6.8AI score0.0007EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.2 views

PT-2025-41616

Name of the Vulnerable Software and Affected Versions Drupal Authenticator Login versions prior to 2.1.8 Description An authentication bypass issue exists in Drupal Authenticator Login. This allows attackers to bypass authentication mechanisms by utilizing an alternate path or channel...

8.8CVSS6.8AI score0.0007EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-6001

Malware in sbrugna...

1.9CVSS6.2AI score0.00026EPSS
Exploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2013-4101

Malware in sbrugna...

5CVSS6.4AI score0.01352EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-0288

Malware in sbrugna...

6.8CVSS6.1AI score0.00265EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-0491

Malware in sbrugna...

6.5CVSS6.1AI score0.00047EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-4102

Malware in sbrugna...

5CVSS6.4AI score0.00294EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-12177

Malware in sbrugna...

3.9CVSS4.8AI score0.00054EPSS
Exploits0References2
Rows per page
Query Builder