4315 matches found
CVE-2025-8964
A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...
CVE-2025-8964
CVE-2025-8964 affects code-projects’ Hostel Management System 1.0, specifically the Login component via the hostel_manage.exe file. The vulnerability is described as improper authentication, enabling a local-host attack. The PT-2025-33299 entry confirms the issue and states the exploit has been p...
CVE-2025-8964 code-projects Hostel Management System Login hostel_manage.exe improper authentication
A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...
CVE-2025-8964 code-projects Hostel Management System Login hostel_manage.exe improper authentication
A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...
PT-2025-33299 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hostel Management System version 1.0 Description: A vulnerability exists in the Login component of Hostel Management System 1.0, specifically within the hostel manage.exe file. This issue results in improper authentication and allows for loca...
Code-Projects Hostel Management System 安全漏洞
Hostel Management System is a hostel management system. Hostel Management System suffers from an improper authentication vulnerability that originates from a misbehavior of the file hostelmanage.exe that results in improper authentication, no details of the vulnerability are available at this tim...
GHSA-VQ9X-W82R-RHMC Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms
Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...
CVE-2025-52392
Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...
CVE-2025-53793
Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...
CVE-2025-53793
Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...
Improper Authentication
github.com/openbao/openbao is vulnerable to improper authentication. The vulnerability is due to unexpected normalization in the underlying TOTP library, which allows an attacker to reuse a valid TOTP code multiple times instead of only once...
Azure Stack Hub Information Disclosure Vulnerability
Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...
Windows NTLM Elevation of Privilege Vulnerability
Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the Login function in the api/login.go file. An attacker can gain unauthorized access by submitting any 6-digit code during the two-factor authentication process. Remediation Upgrade...
PT-2025-32860 · Microsoft · Azure Stack
Name of the Vulnerable Software and Affected Versions: Azure Stack affected versions not specified Description: Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network. Recommendations: At the moment, there is no information about a newer...
PT-2025-32854
Name of the Vulnerable Software and Affected Versions: Windows NTLM affected versions not specified Description: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about a newer versio...
Security Bulletin: IBM Event Processing is vulnerable to Improper Authentication
Summary IBM Event Processing's backend contains a version of JDBC driver that may allow unwanted connections. Vulnerability Details CVEID:CVE-2025-49146 DESCRIPTION: pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with...
CVE-2025-8838 WinterChenS my-site Backend admin preHandle improper authentication
A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improper authentication. The attack can be...
CVE-2025-8838 WinterChenS my-site Backend admin preHandle improper authentication
A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improper authentication. The attack can be...
Improper Authentication
Overview @fedify/fedify is an An ActivityPub server framework Affected versions of this package are vulnerable to Improper Authentication via the handleInboxInternal function in the federation/handler.ts file. An attacker can impersonate any actor across all instances by sending forged activities...