CVE-2025-63667

CVE-2025-63667 — Vatilon 系列 IP 摄像头漏洞证据（脱敏版） 摘要 多款基于 Vatilon 的 IP 摄像头（已观测到的品牌：SIMICAM、KEVIEW、ASECAM）在未验证凭据正确性 的情况下发放 Session-Id 令牌。此缺陷允许未经身份验证的攻击者获取有效会话，并通过暴露的 API 端点访问管理员数据，例如明文账户凭据。 漏洞类型： 访问控制不当 / 身份验证不当 影响： 远程信息泄露、权限提升 CVSS v3.1： 7.5（AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N） 受影响设备（已观测） 品牌| devtype|...

Unverified Password Change

Overview Affected versions of this package are vulnerable to Unverified Password Change via the verifynoservice process in openc3/lib/openc3/models/authmodel.rb and openc3-cosmos-cmd-tlm-api/app/controllers/authcontroller.rb. An attacker can change a password by supplying a valid session token to...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

HUMAX WiFi Router HG-100R DNS Hijacking Vulnerability

The HG-100R is a router. A DNS hijacking vulnerability exists in the HUMAX WiFi Router HG-100R. The vulnerability is caused by first constructing a special request to bypass the authentication of the management console. The vulnerability is due to the router failing to validate the session token...

Skype Account Service - Session Token Bypass Vulnerability

Document Title: =============== Skype Account Service - Session Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=762 http://www.vulnerability-lab.com/getcontent.php?id=739 MSRC ID: 13175 Release Date: ============= 2012-11-14...

Skype Account Service - Session Token Bypass Vulnerability

Document Title: =============== Skype Account Service - Session Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=762 http://www.vulnerability-lab.com/getcontent.php?id=739 MSRC ID: 13175 Release Date: ============= 2012-11-14...