CVE-2017-7921-Writeup-2026

CVE-2017-7921 — 海康威视 IP 摄像头 / DVR / NVR 身份验证不当 — 通过构造的查询参数实现权限提升 | ---|--- CVE ID| CVE-2017-7921 漏洞类型| CWE-287：身份验证不当 CVSS v3.0 基础分数| 10.0（严重） — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS v2.0 分数| 7.5（高危） — AV:N/AC:L/Au:N/C:P/I:P/A:P 披露日期| 2017年（ICS-CERT 公告 ICSA-17-124-01） 厂商| 海康威视数字技术股份有限公司 状态| 已修...

EUVD-2026-72540

Improper Authentication vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registration is gated by an initial access token. resolvesecret/3 in AshAuthentication.Oauth2Server reached through resolvesecre...

CVE-2026-82758

ash_authentication_oauth2_server (ash-project, Elixir) has an Improper Authentication flaw in resolve_secret/3: any secret-provider return other than {:ok, _} or :error was treated as valid, wrapping nil, false, or "" as {:ok, value}. When the initial_access_token resolves to such an empty value,...

CVE-2017-7921-EXP

CVE-2017-7921 漏洞利用 Hikvision 设备中存在一个身份验证不当的问题。 ​ 身份验证不当漏洞发生在应用程序未充分或正确地验证用户身份时。 ​ 这可能导致恶意用户提升其在系统上的权限并获取敏感信息。 ​ https://seclists.org/fulldisclosure/2017/Sep/23 ​ 漏洞详情： ​ ---------------------- ​ 获取所有用户及其角色的列表： ​ http://camera.ip/Security/users?auth=YWRtaW46MTEK ​ 无需身份验证即可获取摄像机快照： ​...

EUVD-2026-72494

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address...

CVE-2026-86478

JetBrains YouTrack is vulnerable to an improper authentication flaw in the YouTrack Helpdesk component prior to versions 2025.3.161254 and 2026.1.14042 . The vulnerability allows an unauthenticated attacker to perform account takeover by supplying a self-asserted email address, effectively bypass...

CVE-2021-26088

PoC for CVE-2021-26088 用 PowerShell 编写 描述 FSSO Collector 中的认证漏洞可能允许未经认证的用户绕过任何防火墙认证规则，通过发送特制的 UDP 登录通知数据包访问受保护的网络。 https://www.fortiguard.com/psirt/FG-IR-20-191 内容 forgeauth.ps1：主要利用脚本 checksrcport.ps1：获取分配给当前用户的源端口范围 免责声明...

CVE-2025-22968

CVE-2025-22968 D-Link DWR-M972V ソフトウェアバージョン 1.05SSG の認証不要アクセス脆弱性 説明 D-Link DWR-M972V（ソフトウェアバージョン 1.05SSG）のデフォルト設定における認証不要のアクセスにより、匿名の攻撃者がルーターにアクセスし、公開アクセスを介して悪意のあるバックドアスクリプトをアップロードできる。 脆弱性タイプ 不適切な認証 製品ベンダー D-Link 影響を受ける製品コードベース D-Link DWR-M972V Software Version 1.05SSG 影響を受けるコンポーネント ルーター上の Router...

EUVD-2026-72408

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass...

CVE-2026-80128

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an Improper Authentication vulnerability. A low-privileged remote attacker could exploit this to achieve protection mechanism bypass . The CVSS 3.1 base score is 6.4 (...

CVE-2026-86306

light0011 CMS , a PHP-based content management system hosted on GitHub, is affected by an improper authentication flaw in the Cookie Helper component. The vulnerability resides in the file App/Home/Model/UserModel.class.php and is triggered by manipulating the Username argument. Because the flaw ...

EUVD-2026-72397

A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects an unknown part of the file App/Home/Model/UserModel.class.php of the component Cookie Helper. Executing a manipulation of the argument Username can lead...

CVE-2019-8978

CVE-2019-8978 Ellucian Banner Web Tailor 与 Banner Enterprise Identity Services 中的身份验证不当漏洞（CWE-287） 作者：Katie Mulliken [email protected] 致谢：卡内基梅隆大学 CERT 协调中心 信息 发现日期：2018 年 12 月 17 日 厂商：Ellucian Company L.P. 厂商主页：https://www.ellucian.com 产品：Banner Web Tailor 和 Banner Enterprise Identity Servic...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - 海康威视摄像头系列认证不当漏洞 一个被标识为CVE-2017-7921的安全漏洞，影响多款海康威视摄像头型号。该漏洞存在于DS-2CD2xx2F-I系列（V5.2.0 build 140721至V5.4.0 build 160530）、DS-2CD2xx0F-I系列（V5.2.0 build 140721至V5.4.0 Build 160401）、DS-2CD2xx2FWD系列（V5.3.1 build 150410至V5.4.4 Build 161125）、DS-2CD4x2xFWD系列（V5.2.0 build 140721至V5.4.0 Build...

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 PoC漏洞利用 此仓库包含针对CVE-2024-11680的PoC（概念验证）漏洞利用代码，该漏洞影响ProjectSend r1605及更早版本。该漏洞利用因权限配置不当导致的认证缺陷。 功能特点 利用不当认证修改应用程序标题，以此确认漏洞存在。 启用不安全选项（客户端注册、自动批准和文件上传）。 注册新用户以演示权限配置不当问题。 测试完成后自动恢复原始应用程序标题。 使用方法 前提条件 1. 一个运行r1605或更早版本的ProjectSend 的有效目标。 2. curl：该脚本使用curl发送HTTP请求。...

EUVD-2026-72351

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit An Improper Authentication issue was discovered in Hikvision devices. ​ The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. ​ This may allow a malicious user to escalate his or her privileges on the system...

ColumbiaSoft DocumentLocator - Improper Authentication

Instances of ColumbiaSoft's Document Locator prior to version 7.2 SP4 and 2021.1 are vulnerable to an Improper Authentication/SSRF vulnerability. This template identifies vulnerable instances of the ColumbiaSoft Document Locater application by confirming external DNS interaction/lookups by...

JFrog Artifactory Access Blank Join Key Authentication Bypass

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. id: CVE-2026-82329 info: name: JFrog Artifactory Access Blank Join Key Authentication Bypass author: johnk3r,pruv...

ZenML ZenML Server - Improper Authentication

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. id: CVE-2024-25723 info:...