PT-2024-30790 · WordPress · Social Connect

Name of the Vulnerable Software and Affected Versions: Social Connect plugin for WordPress versions up to, and including, 1.2 Description: The issue is due to insufficient verification on the OpenID server being supplied during the social login through the plugin. This makes it possible for...

PT-2024-29600 · WordPress · Build App Online

Name of the Vulnerable Software and Affected Versions: Build App Online plugin for WordPress versions up to, and including, 3.0.5 Description: The issue is due to the eb user email verification key default value being empty and the missing not empty check in the eb user email verify function. Thi...

PT-2024-22553 · Acera · Acera 9010-24 +1

Name of the Vulnerable Software and Affected Versions: ACERA 9010-08 firmware versions v02.04 and earlier ACERA 9010-24 firmware versions v02.04 and earlier Description: The password is empty in the initial configuration, allowing an unauthenticated attacker to log in with no password and obtain ...

FURUNO SYSTEMS Managed Switch ACERA 9010 running in non MS mode with the initial configuration has no password

Overview In the initial configuration of Managed Switch ACERA 9010 provided by FURUNO Systems Co., Ltd., the password is empty CWE-258 and the remote access service is enabled. The products are affected only when running in non MS mode with the initial configuration. FURUNO SYSTEMS Co.,Ltd...

FURUNO ACERA 安全漏洞

FURUNO ACERA is a series of switches from FURUNO Japan. A security vulnerability exists in the FURUNO ACERA 9010 v02.04 and earlier firmware versions, ACERA 9010-24 v02.04 and earlier firmware versions, which originates from an unauthenticated attacker being able to log in to the product without ...

Exploit for SQL Injection in Abocms Abo.Cms

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227...

CVE-2023-6036

The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handleauthrequest' and 'hadleloginrequest'. This makes it possible for non authenticated attackers to log in as any existing user on the site,...

VulnCheck KEV: CVE-2023-2437

The UserPro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.1. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any...

PT-2023-29929 · Mitsubishi · Melsec Iq-R Series Cpu Modules

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-F/iQ-R Series CPU modules affected versions not specified Description: The issue allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker...

CVE-2023-41351

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL. This makes it possible for unauthenticated remote attackers to log in as any existing...

WordPress Plugin MStore API Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Code injection

UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application...

CVE-2023-45911

An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password...

CVE-2023-45911

An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password...

Wipotec ComScale Security Vulnerability

Wipotec ComScale is an application from Wipotec. It can display collected data on a connected PC or tablet device. A security vulnerability exists in Wipotec ComScale version v4.3.29.21344, v4.4.12.723. An attacker exploits the vulnerability to log in as any user without a password...

PT-2023-29764 · Wipotec Gmbh · Comscale

Name of the Vulnerable Software and Affected Versions: WIPOTEC GmbH ComScale versions 4.3.29.21344 through 4.4.12.723 Description: An issue in WIPOTEC GmbH ComScale allows unauthenticated attackers to login as any user without a password. Recommendations: For versions 4.3.29.21344 and 4.4.12.723,...

CVE-2023-41030

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

Hardcoded credentials

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

CVE-2023-3162

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to...

CVE-2023-38132

CVE-2023-38132 concerns the ELECOM LAN-W451NGR family (LOGITEC-related devices) with an improper access control vulnerability that allows an unauthenticated attacker to log in to the telnet service. Affected component: telnet/login mechanism on the device’s management interface. Root cause: failu...