Improper Authentication

gitlab is vulnerable to Improper Authentication. The vulnerability occurs due to incorrect authentication with package registries when IP restrictions are configured resulting in allowing a malicious attacker to misuse a deploy token from any location...

Improper Authentication

gitlab is vulnerable to Improper Authentication. The vulnerability exists due to missing authentication which allows an attacker with access to a victim's session to disable two-factor authentication...

Improper Authentication

gitlab is vulnerable to Improper Authentication. The vulnerability allows a malicious attacker to steal a users API token via a malicious link due to insufficient validation...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

🕵️ Vulnerability Scanner 🛡️ This Python script helps you scan...

CVE-2023-0264: Improper Authentication

A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue...

CVE-2023-38691: Improper Authentication

matrix-appservice-bridge provides an API for setting up bridges. Starting in version 4.0.0 and prior to versions 8.1.2 and 9.0.1, a malicious Matrix server can use a foreign user's MXID in an OpenID exchange, allowing a bad actor to impersonate users when using the provisioning API. The library...

Google Chrome Autofill Bypass

The vulnerability of Google Chrome’s Autofill function is related to improper authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

CVE-2023-20214: Improper Authentication

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance. This vulnerability is...

CVE-2023-34196: Improper Authentication

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...

Improper Authentication

silverstripe/framework is vulnerable to Improper Authentication. The vulnerability exists due to the user creation process in Member.php, which inserts an empty password when a new user is created. While the default member authenticator and login form require a non-empty password, other...

Moxa OnCell Improper Authentication (CVE-2016-8362)

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35...

CVE-2023-33563: Improper Authentication

In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078 This script ethically checks for the presence...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078-Poc-Exploit This tool is built in golang langua...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078-Poc-Exploit This tool is built in golang langua...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078-Poc-Exploit This tool is built in golang langua...

Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor

Mass-CVE-2023-32243 Mass-CVE-2023-32243 !...

CVE-2023-3622: Improper Authentication

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource...

PT-2023-5209 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to improper authentication in Zoom clients, which may allow an authenticated user to conduct a denial of service via network access. This could potentially allow a remote...