PT-2023-14784 · Fortinet · Fortigate +1

Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.4.6 and below Description: The issue is related to an incorrect user management vulnerability in the VDOM creation component. This may allow an attacker to access a FortiGate without a password via newly created VDOMs...

Fortinet FortiManager 安全漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

The vulnerability of the microprogrammed software of Dahua ASI7213X-T1 access control terminals, related to the possibility of bypassing authentication procedures, allows a intruder to gain access to the device without a password.

The vulnerability of the microprogrammed software of Dahua ASI7213X-T1 access control terminals relates to the possibility of bypassing the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the device without a password...

CVE-2022-2104

The www-data Apache web server account is configured to run sudo with no password for many commands including /bin/sh and /bin/bash...

CVE-2022-31463

Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used...

Robotronic RunAsSpc 信任管理问题漏洞

Robotronic RunAsSpc is a software that supports running an application without a password in another system account. A security vulnerability exists in Robotronic RunAsSpc 4.0 that stems from the affected product's use of a common and reversible encryption key...

Arista Networks Arista EOS 安全漏洞

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

Arista Networks Arista EOS 安全漏洞

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

Canon LBP223 安全漏洞

Canon LBP223 is a printer from Canon Japan. The Canon LBP223 printer has an authorization issue vulnerability, which stems from the fact that the LBP223 printer system management mode login does not require an account password or PIN. attackers can use this vulnerability to enter the background a...

How to Go Passwordless on Your Microsoft Account

You no longer need an ungainly string of characters to access your Windows PC or Xbox...

You Can Now Ditch the Password on Your Microsoft Account

You no longer need a long string of characters to access Windows and Office 365...

Epikur 访问控制错误漏洞

Epikur is a healthcare mobile application from German company Epikur that provides users with psychotherapy, patient management and other features. An authorization issue vulnerability exists in Epikur versions prior to 20.1.1 that stems from an administrator account accessing the default...

CVE-2020-15483

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access...

Exclusive – Any Mitron (Viral TikTok Clone) Profile Can Be Hacked in Seconds

Mitron means "friends" in Hindi, you have been fooled again! Mitron is not really a 'Made in India' product, and the viral app contains a highly critical, unpatched vulnerability that could allow anyone to hack into any user account without requiring interaction from the targeted users or their...

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP Access Control Error Vulnerability

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP is a baby surveillance camera. A security vulnerability exists in the CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP using firmware version 3.4.2.0919. The vulnerability can be exploited by an attacker to access the RTSP service without...

CVE-2020-9349

The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-29856)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An information disclosure vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to access the contents of locked applications without a password...

LibSSH Flaw Allows Hackers to Take Over Servers Without Password

A four-year-old severe vulnerability has been discovered in the Secure Shell SSH implementation library known as Libssh that could allow anyone to completely bypass authentication and gain unfettered administrative control over a vulnerable server without requiring a password. The security...

CVE-2018-0294

A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not properly delete...

CVE-2017-12729

A SQL Injection issue was discovered in Moxa SoftCMS Live Viewer through 1.6. An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability has been identified. Attackers can exploit this vulnerability to access SoftCMS without knowing the user's password...