Revive Adserver Brute Force Attack Vulnerability

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. A brute force vulnerability exis...

Design/Logic Flaw

An uncontrolled resource consumption vulnerability CWE-400 in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests...

FortiRecorder - DoS in login authentication mechanism

An uncontrolled resource consumption vulnerability CWE-400 in FortiRecorder login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests...

PT-2023-20169 · Apollo · Apollo

Name of the Vulnerable Software and Affected Versions: Apollo versions prior to 2.1.0 Description: Apollo is a configuration management system. There are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no...

CVE-2022-42983

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...

CVE-2022-40144

Trend Micro Apex One and Trend Micro Apex One as a Service are affected by CVE-2022-40144, where an attacker who can access the admin console or the system can bypass login authentication by sending specially crafted requests. The JVN/NVD entries describe a broader set of related vulnerabilities ...

Cross site request forgery (csrf)

DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request...

CVE-2022-35147

DoraCMS v2.18 and earlier has an authentication bypass vulnerability (CVE-2022-35147). The issue allows an attacker to bypass login via a crafted HTTP request, enabling unauthorized access. Affected software is DoraCMS, versions up to 2.18; root cause involves bypassing authentication logic. Impa...

CVE-2017-20127

A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2017-20127 KB Login Authentication Script sql injection

A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2017-20127 KB Login Authentication Script sql injection

A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has...

KB Login Authentication Script SQL注入漏洞

KB Login Authentication Script is a login authentication script by Kunal Bansal Personal Developer. A security vulnerability exists in KB Login Authentication Script version 1.1, which can be exploited by an attacker to perform sql injection via the username/password parameter. The attack method ...

Shopware Cross-Site Scripting Vulnerability (CNVD-2022-58390)

Shopware is a German Shopware company's open source e-commerce software. A cross-site scripting vulnerability exists in Shopware versions prior to 5.7.12, which stems from a lack of checksum filtering of user-supplied and output data during login authentication. An attacker can exploit this...

Samsung Account 授权问题漏洞

Samsung Account is a mobile account from Samsung, a South Korean company. Samsung Account versions prior to 13.1.0.1 contain an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker...

Reolink RLC-410W cgiserver.cgi Login authentication bypass vulnerability

Summary An authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to authentication bypass. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Reolink...

Sql injection

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx...

PT-2021-6790 · Mitsubishi · Melsec Iq-R Series Rj71Gf11-T2 +22

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series...

SAP NetWeaver AS 安全漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. A security vulnerability exists in SAP NetWeaver AS, which is caused by insufficient product login authentication. The following products and versions...

Logic Flaw Vulnerability in SG2126F at Shanghai Atech Technology Co.

Atech is a small and medium-sized network solution provider and service provider in China. Ltd. SG2126F has a logic flaw vulnerability that can be exploited by an attacker to successfully bypass login authentication by modifying the return value of request...

Shenzhen Jieshun Technology Industry Co., Ltd. Y10A-T Face Access Control with Logic Flaw Vulnerability

Y10A-T face access control is a face recognition access control product widely used in commercial buildings, parks, communities, equipped with cameras, with face recognition door opening function of the access control system. Shenzhen Jieshun Technology Industry Co., Ltd Y10A-T face access contro...