Lucene search
+L

9415 matches found

RedhatCVE
RedhatCVE
added 2026/05/28 8:12 p.m.14 views

CVE-2025-68712

SpSoft AppLock com.sp.protector.free 7.9.40 for Android allows a local attacker with physical access to bypass fingerprint or PIN authentication. Although the app integrates Android's biometric mechanisms, the lock is implemented with a custom overlay that fails to consistently enforce...

5.5CVSS5.8AI score0.00136EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/27 7:59 p.m.9 views

CVE-2026-48064 pam_usb: PAM_RHOST check skipped when deny_remote=false allows XDMCP authentication bypass

pamusb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, when a PAM service is configured with denyremote=false in pamusb commonly done for display managers such as gdm-password or lightdm to bypass process/TTY heuristics for local sessions, the PAMRHOST...

8.1CVSS6AI score
SaveExploits0References4
EUVD
EUVD
added 2026/05/27 3:33 p.m.19 views

EUVD-2026-32278

In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to bypass admin authentication and gain full access to the service protocol and configuration panel...

9.3CVSS5.8AI score0.00662EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.19 views

PT-2026-43701

In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to bypass admin authentication and gain full access to the service protocol and configuration panel...

9.3CVSS5.9AI score0.00625EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.14 views

Spsoft APPLOCK 安全漏洞

Spsoft APPLOCK is a mobile app lock developed by Spsoft Corporation. It uses a password and fingerprint for securing applications. Version 7.9.40 of Spsoft AppLock contains a security vulnerability. This vulnerability arises from the inconsistent execution of authentication processes by the custo...

5.5CVSS5.9AI score0.00136EPSS
SaveExploits0References4
Schneier on Security
Schneier on Security
added 2026/05/26 3:2 p.m.14 views

Identifying People Using Wi-Fi Routers

Not identifying people based on their use of Wi-Fi routers, but identifying people using Wi-Fi signals. This is accomplished through what is known as WiFi sensing, or the use of WiFi signals to infer information about a physical environment. When radio signals like WiFi travel through a space, th...

5.8AI score
SaveExploits0
Cvelist
Cvelist
added 2026/05/25 12:30 a.m.43 views

CVE-2026-9410 Sushmi-pal Invoice-System Profile Workflow profile improper authorization

A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workflow. Such manipulation of the argument ID leads to improper authorization. It is possible to launc...

5.3CVSS0.00198EPSS
SaveExploits0References4
Circl
Circl
added 2026/05/22 10:0 p.m.13 views

CVE-2026-47373

creationtimestamp| type| source ---|---|--- 2026-05-22 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmhwoid5co26...

7.5CVSS5.8AI score0.00393EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/22 1:16 p.m.17 views

OESA-2026-2360 python-pip security update

%changelog Thu Apr 9 2026 yixiangzhike [email protected] - 23.3.1-10 - Fix CVE-2026-25645 Security Fixes: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavio...

4.6CVSS5.8AI score0.00144EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/22 2:3 a.m.7 views

ECHO-2DA5-FEA1-604D

Bulletin has no description...

8.8CVSS5.7AI score0.00796EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.9 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k: Handle lock during peerid find The ath12kpeerfindbyid function requires that the caller holds the ab-baselock. Currently, the WBM error path does not hold the lock, and calling that function leads to the following...

5.2AI score0.00202EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux – Vulnerability in opensc

A flaw was discovered in OpenSC packages that could allow for a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length PIN is passed. This issue poses a security risk, especially for OS...

6.6CVSS6.9AI score0.00925EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/19 3:59 p.m.6 views

MINI-H6PQ-HFVJ-H96Q

Bulletin has no description...

6.1CVSS5.7AI score0.00108EPSS
SaveExploits0
OSV
OSV
added 2026/05/18 3:45 p.m.5 views

MINI-GFQ6-W36R-F39C

Bulletin has no description...

5.3CVSS5.7AI score0.00264EPSS
SaveExploits0
OSV
OSV
added 2026/05/17 12:32 p.m.5 views

MINI-M965-97W5-6JGG

Bulletin has no description...

6.1CVSS5.7AI score0.00314EPSS
SaveExploits0
OSV
OSV
added 2026/05/16 8:46 p.m.13 views

MINI-89PH-WV9C-V45G

Bulletin has no description...

7.5CVSS6.2AI score0.0043EPSS
SaveExploits0
OSV
OSV
added 2026/05/16 3:1 p.m.8 views

MINI-9XRF-4G6P-4FCJ

Bulletin has no description...

7.5CVSS5.7AI score0.00471EPSS
SaveExploits0
OSV
OSV
added 2026/05/15 6:17 p.m.12 views

GHSA-QXVM-R42F-5P8J AVideo's Meet plugin: `uploadRecordedVideo.json.php` derives `users_id` from the uploaded filename and calls passwordless `User->login()`, allowing any caller with the Meet shared secret to obtain a session as arbitrary users including admin

Summary Type: Authorization-bypass via user-controlled identifier. The Meet plugin's recorded-video upload endpoint plugin/Meet/uploadRecordedVideo.json.php authenticates the caller using a single shared Authorization: Bearer against $objM-secret. Once that check passes, the endpoint reads the...

8.1CVSS5.9AI score0.00453EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/15 1:46 p.m.14 views

ECHO-0ADD-693B-F63C

Bulletin has no description...

8.8CVSS5.7AI score0.00234EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/14 8:48 a.m.5 views

BIT-MODSECURITY2-2026-42268 ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception std::outofrange caused by unsigned integer underflow in libmodsecurity3 if the user administrator uses a rule any of @verifySSN...

8.2CVSS5.6AI score0.00396EPSS
SaveExploits1References2
Rows per page
Query Builder