Lucene search
+L

669 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•12 views

CVE-2024-22066: Authentication Bypass by Capture-replay

There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device...

7.5CVSS5.8AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/07 4:15 p.m.•28 views

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

8.8CVSS0.0034EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/10/07 12:00 a.m.•8 views

PT-2024-31883

Name of the Vulnerable Software and Affected Versions IoT Haat Smart Plug IH-IN-16A-S version 5.16.1 Description The issue is related to Authentication Bypass by Capture-replay, which allows unauthorized access. Recommendations For IoT Haat Smart Plug IH-IN-16A-S version 5.16.1, consider disablin...

8.8CVSS5.8AI score0.0034EPSS
SaveExploits1References7
CVE
CVE
•added 2024/10/07 12:00 a.m.•76 views

CVE-2024-46041

The IoT Haat Smart Plug IH-IN-16A-S (Application Software Version v5.16.1 ) is vulnerable to an Authentication Bypass by Capture-replay . During the provisioning phase, an attacker can perform a replay attack by replacing a legitimate authentication token with an attacker-controlled token. This v...

8.8CVSS7.1AI score0.0034EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/10/07 12:00 a.m.•35 views

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

0.0034EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•7 views

CVE-2024-46041: Authentication Bypass by Capture-replay

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

8.8CVSS5.7AI score0.0034EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/10/07 12:00 a.m.•15 views

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

6.9AI score0.0034EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/13 12:00 a.m.•5 views

CVE-2024-43099: Authentication Bypass by Capture-replay

The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to maintain security. However, if an attacker captures this session key, they can inject traffic into a...

8.8CVSS5.8AI score0.00284EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/25 12:00 a.m.•5 views

CVE-2024-45244: Authentication Bypass by Capture-replay

Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window...

5.3CVSS6AI score0.00589EPSS
SaveExploits0References1
osv_go
osv_go
•added 2024/08/21 3:29 p.m.•30 views

GO-2022-0889 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

7.5CVSS7.5AI score0.01309EPSS
SaveExploits0References5
osv_go
osv_go
•added 2024/08/21 3:29 p.m.•57 views

GO-2022-0813 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

7.5CVSS7.6AI score0.01147EPSS
SaveExploits0References5
osv_go
osv_go
•added 2024/08/21 2:30 p.m.•22 views

GO-2022-0310 Capture-replay in Gitea in code.gitea.io/gitea

Capture-replay in Gitea in code.gitea.io/gitea...

9.8CVSS9.4AI score0.02139EPSS
SaveExploits0References9
osv_go
osv_go
•added 2024/08/20 8:29 p.m.•61 views

GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...

9.8CVSS9.4AI score0.00837EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/08/02 3:16 p.m.•19 views

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

8.4CVSS5.8AI score0.00214EPSS
SaveExploits0References2
NVD
NVD
•added 2024/08/02 3:16 p.m.•53 views

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

8.4CVSS0.00214EPSS
SaveExploits0References2
CVE
CVE
•added 2024/08/02 12:00 a.m.•56 views

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) allows a local attacker to perform an Authentication Bypass . This is caused by insufficient protection against capture-replay attacks . While no specific patch version is c...

8.4CVSS6.8AI score0.00214EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/02 12:00 a.m.•19 views

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

7AI score0.00214EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/08/02 12:00 a.m.•71 views

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/08/02 12:00 a.m.•20 views

PT-2024-28262 · Horizon Business Services Inc. · Caterease

Name of the Vulnerable Software and Affected Versions: Horizon Business Services Inc. Caterease Software versions 16.0.1.1663 through 24.0.1.2405 Description: The issue allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against...

8.4CVSS6.4AI score0.00214EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/02 12:00 a.m.•8 views

CVE-2024-38890: Authentication Bypass by Capture-replay

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

8.4CVSS5.7AI score0.00214EPSS
SaveExploits0References1
Rows per page
Query Builder