Lucene search
+L

4315 matches found

NVD
NVD
added 2025/08/14 3:15 p.m.12 views

CVE-2025-8964

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

7.8CVSS0.0026EPSS
SaveExploits1References7
CVE
CVE
added 2025/08/14 3:02 p.m.28 views

CVE-2025-8964

CVE-2025-8964 affects code-projects’ Hostel Management System 1.0, specifically the Login component via the hostel_manage.exe file. The vulnerability is described as improper authentication, enabling a local-host attack. The PT-2025-33299 entry confirms the issue and states the exploit has been p...

7.8CVSS7AI score0.0026EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2025/08/14 3:02 p.m.22 views

CVE-2025-8964 code-projects Hostel Management System Login hostel_manage.exe improper authentication

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

5.3CVSS0.0026EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/08/14 3:02 p.m.6 views

CVE-2025-8964 code-projects Hostel Management System Login hostel_manage.exe improper authentication

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

5.3CVSS7AI score0.0026EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.19 views

PT-2025-33299 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hostel Management System version 1.0 Description: A vulnerability exists in the Login component of Hostel Management System 1.0, specifically within the hostel manage.exe file. This issue results in improper authentication and allows for loca...

7.8CVSS5.1AI score0.0026EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.7 views

Code-Projects Hostel Management System 安全漏洞

Hostel Management System is a hostel management system. Hostel Management System suffers from an improper authentication vulnerability that originates from a misbehavior of the file hostelmanage.exe that results in improper authentication, no details of the vulnerability are available at this tim...

7.8CVSS7AI score0.0026EPSS
SaveExploits1References7
OSV
OSV
added 2025/08/13 3:30 p.m.49 views

GHSA-VQ9X-W82R-RHMC Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

8.7CVSS7.1AI score0.00861EPSS
SaveExploits3References5
NVD
NVD
added 2025/08/13 2:15 p.m.25 views

CVE-2025-52392

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

5.4CVSS0.00861EPSS
SaveExploits3References3
OSV
OSV
added 2025/08/12 6:15 p.m.8 views

CVE-2025-53793

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.01311EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/12 6:15 p.m.9 views

CVE-2025-53793

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

7.5CVSS0.01311EPSS
SaveExploits0References1
Veracode
Veracode
added 2025/08/12 12:42 p.m.10 views

Improper Authentication

github.com/openbao/openbao is vulnerable to improper authentication. The vulnerability is due to unexpected normalization in the underlying TOTP library, which allows an attacker to reuse a valid TOTP code multiple times instead of only once...

6.5CVSS6.9AI score0.00209EPSS
SaveExploits0References4Affected Software2
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:00 a.m.7 views

Azure Stack Hub Information Disclosure Vulnerability

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

7.5CVSS7AI score0.01311EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:00 a.m.8 views

Windows NTLM Elevation of Privilege Vulnerability

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.4AI score0.38176EPSS
SaveExploits0
Snyk
Snyk
added 2025/08/12 12:13 a.m.5 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the Login function in the api/login.go file. An attacker can gain unauthorized access by submitting any 6-digit code during the two-factor authentication process. Remediation Upgrade...

8.5CVSS7.4AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.7 views

PT-2025-32860 · Microsoft · Azure Stack

Name of the Vulnerable Software and Affected Versions: Azure Stack affected versions not specified Description: Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network. Recommendations: At the moment, there is no information about a newer...

7.8CVSS6AI score0.01311EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.7 views

PT-2025-32854

Name of the Vulnerable Software and Affected Versions: Windows NTLM affected versions not specified Description: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about a newer versio...

9CVSS6.3AI score0.38176EPSS
SaveExploits0References15
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/11 9:52 a.m.8 views

Security Bulletin: IBM Event Processing is vulnerable to Improper Authentication

Summary IBM Event Processing's backend contains a version of JDBC driver that may allow unwanted connections. Vulnerability Details CVEID:CVE-2025-49146 DESCRIPTION: pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with...

8.2CVSS6.8AI score0.00478EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/11 8:32 a.m.3 views

CVE-2025-8838 WinterChenS my-site Backend admin preHandle improper authentication

A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improper authentication. The attack can be...

7.5CVSS7.3AI score0.0053EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/08/11 8:32 a.m.25 views

CVE-2025-8838 WinterChenS my-site Backend admin preHandle improper authentication

A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improper authentication. The attack can be...

7.5CVSS0.0053EPSS
SaveExploits1References6
Snyk
Snyk
added 2025/08/09 1:46 a.m.9 views

Improper Authentication

Overview @fedify/fedify is an An ActivityPub server framework Affected versions of this package are vulnerable to Improper Authentication via the handleInboxInternal function in the federation/handler.ts file. An attacker can impersonate any actor across all instances by sending forged activities...

8.7CVSS6.9AI score0.00583EPSS
SaveExploits0References2
Rows per page
Query Builder