669 matches found
Qrio Lock authorization issue vulnerability
Qrio Lock is Qrio's smart door lock control software. A security vulnerability exists in Qrio Lock version 2.0.9 and prior versions that stems from an easy bypass of authentication via capture replay, which can be exploited by an attacker to potentially analyze the product's communication data an...
JVN#48687031: Qrio Smart Lock Q-SL2 vulnerable to authentication bypass by capture-replay
Qrio Smart Lock Q-SL2 provided by Qrio, inc. contains an authentication bypass by capture-replay vulnerability CWE-294. Impact An attacker may analyze the product's communication data and perform unintended operations under certain conditions. Solution Update the firmware and related products...
Siemens SICAM P850 and SICAM P855 Authentication Bypass By Capture-Replay (CVE-2022-29878)
A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair...
Exploit for Improper Input Validation in Microsoft
PoC exploit for CVE-2023-23397, a vulnerability in the Apache HT...
Authentication Bypass by Capture-replay
An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...
CVE-2022-47930: Authentication Bypass by Capture-replay
An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session...
CVE-2023-1886
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
Authentication flaw
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1886
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1886 Authentication Bypass by Capture-replay in thorsten/phpmyfaq
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1886 Authentication Bypass by Capture-replay in thorsten/phpmyfaq
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-20123: Authentication Bypass by Capture-replay
A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and RDP could allow an unauthenticated, physical attacker to replay valid user session credentials and gain unauthorized access to an affected macOS or Windows...
CVE-2023-1886 Authentication Bypass by Capture-replay in thorsten/phpmyfaq
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ security vulnerabilities
phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from the ability to bypass authentication via capture replay...
CVE-2023-1886: Authentication Bypass by Capture-replay
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
PT-2023-17314 · Unknown · Thorsten/Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue allows for authentication bypass by capture-replay, enabling unlimited comments to be sent. This has been fixed in version 3.1.12. Recommendations: For versions prior to 3.1.12...
GHSA-HWJ7-FRGJ-7829 Answer vulnerable to Authentication Bypass by Capture-replay
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6...
Answer vulnerable to Authentication Bypass by Capture-replay
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6...