37 matches found
CVE-2025-6796 Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability
Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...
PT-2025-24427 · Lucky · Lucky Lm-520-Fsc +2
Name of the Vulnerable Software and Affected Versions: Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321 Description: A vulnerability classified as problematic was found in the affected devices, leading to missing authentication. The manipulation can be launched remotely, and the...
CVE-2019-3927
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2 OIDs. A remote, unauthenticated attacker can use this vulnerability to change the admin or...
CVE-2010-2620
Open FTP Server Open-FTPD 1.2 and earlier allows remote attackers to bypass authentication by sending 1 LIST, 2 RETR, 3 STOR, or other commands without performing the required login steps first...
PT-2025-15053 · Zendto · Zendto
Name of the Vulnerable Software and Affected Versions: ZendTo versions prior to 5.04-7 Description: A type confusion vulnerability in lib/NSSAuthenticator.php allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. The...
CVE-2025-29266
Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled...
CVE-2024-54085
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. Recent assessments: Assessed Attacker Value...
CVE-2024-1817
A vulnerability has been found in Demososo DM Enterprise Website Building System up to 2022.8 and classified as critical. Affected by this vulnerability is the function dmlogin of the file indexDMload.php of the component Cookie Handler. The manipulation of the argument isadmin with the input y...
CVE-2024-48859
Summary: CVE-2024-48859 is an improper authentication vulnerability affecting QNAP QTS and QuTS hero operating systems. The issue could allow remote attackers to compromise system security via network access. Affected versions (patched): QTS 5.1.9.2954 build 20241120 and later; QTS 5.2.2.2950 bui...
PT-2022-22634 · Unknown · Omicard Edm
Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The mail image relay function in OMICARD EDM has a path traversal issue. This allows an unauthenticated remote attacker to bypass authentication and access arbitrary system files...
CVE-2021-32958 Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel
Successful exploitation of this vulnerability on Claroty Secure Remote Access SRA Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface UI. With acces...
The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information
The vulnerability of the openvpn package up to version 2.3.6 in the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the authentication process...
CVE-2007-1389
CVE-2007-1389 affects dynaliens 2.0 and 2.1. The issue allows remote attackers to bypass authentication and perform certain privileged actions by directly requesting admin scripts: validlien.php3, supprlien.php3, supprub.php3, validlien.php3, confsuppr.php3, modiflien.php3, or confmodif.php3 in a...
[SA12364] SugarCRM Unspecified Login Authentication Vulnerability
TITLE: SugarCRM Unspecified Login Authentication Vulnerability SECUNIA ADVISORY ID: SA12364 VERIFY ADVISORY: http://secunia.com/advisories/12364/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: SugarCRM 1.x http://secunia.com/product/3845/ DESCRIPTION: An unspecified...
Solaris 2.6/7/8 - 'TTYPROMPT in.telnet' Remote Authentication Bypass
Solaris TTYPROMPT Security Vulnerability Telnet This vulnerability is very simple to exploit, since it does not require any code to be compiled by an attacker. The vulnerability only requires the attacker to simply define the environment variable TTYPROMPT to a 6-character string, inside telnet...
Cerberus FTP Server 1.x - Buffer Overflow (Denial of Service) (PoC)
Cerberus FTP Server 1.x - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/2901/info erberus FTP Server is a free, multi-threaded file transfer utility for Microsoft Windows systems. There is a buffer overflow in Cerberus FTP Server. The problem occurs when a user i...