Lucene search
+L

37 matches found

Kitploit
Kitploit
โ€ขadded 2026/10/27 4:00 a.m.โ€ข40 views

SafeLine

SafeLine - Make your web apps secure ๐Ÿ  Website | ๐Ÿ“– Docs | ๐Ÿ” Live Demo | ๐Ÿ™‹โ€โ™‚๏ธ Discord | ไธญๆ–‡็‰ˆ ๐Ÿ† Achievements ๐Ÿ‘‹ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and...

6.2AI score
SaveExploits0References1
NVD
NVD
โ€ขadded 2026/09/16 9:17 p.m.โ€ข22 views

CVE-2026-92749

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

9.2CVSS0.00712EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
โ€ขadded 2026/09/16 8:32 p.m.โ€ข34 views

CVE-2026-92749 SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

9.2CVSS6AI score0.00712EPSS
SaveExploits0References5
Cvelist
Cvelist
โ€ขadded 2026/09/16 8:32 p.m.โ€ข47 views

CVE-2026-92749 SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

9.2CVSS0.00712EPSS
SaveExploits0References5
EUVD
EUVD
โ€ขadded 2026/09/16 8:32 p.m.โ€ข23 views

EUVD-2026-81021

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

9.2CVSS6AI score0.00712EPSS
SaveExploits0References5
osv_cve
osv_cve
โ€ขadded 2026/09/16 8:32 p.m.โ€ข36 views

CVE-2026-92749 SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

9.2CVSS6AI score
SaveExploits0References7
CVE
CVE
โ€ขadded 2026/09/16 8:32 p.m.โ€ข72 views

CVE-2026-92749

SafeLine through version 9.4.1 contains an authentication bypass in its management console. The session-signing secret is derived from a time-seeded math/rand generator , allowing unauthenticated remote attackers who can bound the install timestamp to reconstruct the key offline and forge valid a...

9.2CVSS6AI score0.00712EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2026/09/16 12:00 a.m.โ€ข14 views

CVE-2026-92749: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

9.2CVSS6AI score0.00712EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
โ€ขadded 2026/09/16 12:00 a.m.โ€ข11 views

PT-2026-94035

Name of the Vulnerable Software and Affected Versions SafeLine versions prior to 9.4.2 Description The management console session-signing secret is derived from a time-seeded math/rand generator. This allows unauthenticated remote attackers who can determine the installation timestamp to...

9.2CVSS5.9AI score0.00712EPSS
SaveExploits0References8
Kitploit
Kitploit
โ€ขadded 2026/09/04 2:52 p.m.โ€ข31 views

SafeLine v9.4.1

SafeLine - Make your web apps secure ๐Ÿ  Website | ๐Ÿ“– Docs | ๐Ÿ” Live Demo | ๐Ÿ™‹โ€โ™‚๏ธ Discord | ไธญๆ–‡็‰ˆ ๐Ÿ‘‹ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/08/18 3:49 a.m.โ€ข15 views

SafeLine v9.4.0

SafeLine - Make your web apps secure ๐Ÿ  Website | ๐Ÿ“– Docs | ๐Ÿ” Live Demo | ๐Ÿ™‹โ€โ™‚๏ธ Discord | ไธญๆ–‡็‰ˆ ๐Ÿ‘‹ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/07/28 7:22 a.m.โ€ข20 views

SafeLine v9.3.11

SafeLine - Make your web apps secure ๐Ÿ  Website | ๐Ÿ“– Docs | ๐Ÿ” Live Demo | ๐Ÿ™‹โ€โ™‚๏ธ Discord | ไธญๆ–‡็‰ˆ ๐Ÿ‘‹ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/07/17 7:42 p.m.โ€ข18 views

SafeLine v9.3.10

SafeLine - Make your web apps secure ๐Ÿ  Website | ๐Ÿ“– Docs | ๐Ÿ” Live Demo | ๐Ÿ™‹โ€โ™‚๏ธ Discord | ไธญๆ–‡็‰ˆ ๐Ÿ‘‹ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

5.8AI score
SaveExploits0References2
Packet Storm News
Packet Storm News
โ€ขadded 2026/07/07 12:00 a.m.โ€ข26 views

SafeLine SL6 / SL6+ Authentication Bypass

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy BLE interface...

8.7CVSS5.9AI score0.00331EPSS
SaveExploits0
NVD
NVD
โ€ขadded 2026/06/22 10:16 a.m.โ€ข33 views

CVE-2025-4994

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy BLE interface...

8.7CVSS0.00331EPSS
SaveExploits0References2
CVE
CVE
โ€ขadded 2026/06/22 8:10 a.m.โ€ข53 views

CVE-2025-4994

CVE-2025-4994 affects SafeLine SL6 and SL6+ devices used in elevator emergency intercoms. A BLE-facing authentication bypass allows an attacker within wireless range to obtain unauthorized administrative access to the device configuration. Documented impact includes high affects on confidentialit...

8.7CVSS5.9AI score0.00331EPSS
SaveExploits0References2
attackerkb
attackerkb
โ€ขadded 2026/06/22 8:10 a.m.โ€ข14 views

CVE-2025-4994

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy BLE interface...

8.7CVSS5.9AI score0.00331EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
โ€ขadded 2026/06/22 8:10 a.m.โ€ข69 views

CVE-2025-4994 Authentication Bypass for SafeLine SL6 and SL6+

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy BLE interface...

8.7CVSS0.00331EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2026/06/22 8:10 a.m.โ€ข27 views

EUVD-2025-210297

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy BLE interface...

8.7CVSS5.9AI score0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
โ€ขadded 2026/06/22 8:10 a.m.โ€ข23 views

CVE-2025-4994 Authentication Bypass for SafeLine SL6 and SL6+

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy BLE interface...

8.7CVSS5.9AI score0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder