CVE-2026-108972

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

CVE-2026-108972

A vulnerability exists in the SourceCodester Human Resource Management System 1.0 within the Employee Endpoint component. Specifically, the session_start function in the file controller/employee.php is susceptible to improper authentication when an attacker manipulates the role/pfimg/EmpId argume...

CVE-2026-108972 SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

EUVD-2026-98301

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

EUVD-2026-98180

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication...

EUVD-2026-98079

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication...

CVE-2017-7921-Writeup-2026

CVE-2017-7921 — Hikvision IP Camera / DVR / NVR Improper Authentication — Privilege Escalation via Crafted Query Parameter | ---|--- CVE ID| CVE-2017-7921 Vulnerability Class| CWE-287: Improper Authentication CVSS v3.0 Base Score| 10.0 Critical — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS v2.0 Scor...

CVE-2026-89105 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

CVE-2026-89105

The SAP/cloud-security-services-integration-library contains an improper authentication vulnerability in its HybridTokenAuthenticator component. The flaw occurs because the component accepts tokens from unintended ambient IAS/XSUAA bindings , which could allow an attacker to gain unauthorized acc...

CVE-2026-89105 Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library

The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...

CVE-2026-18318

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Google Chrome and Microsoft Edge browsers is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially crafted HTML page...

PT-2026-112279

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

Microsoft ASP.NET: CVE-2026-70175: ASP.NET Core Elevation of Privilege Vulnerability

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-70235: Windows Event Tracing Spoofing Vulnerability

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browser services is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browser services is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Google Chrome and Microsoft Edge browser services is related to improper authentication procedures. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browser services is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a specially created HTML page...

CVE-2026-109114: Improper Authentication

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...