76 matches found
CVE-2023-42793
CVE-2023-42793 설명 JetBrains TeamCity의 보안 취약점으로 인해 공격자가 관리자 권한을 가진 새 사용자공격자가 지정한를 생성할 수 있습니다. 사용 예제 ./cve-2023-42793 http://teamcity.examplewebsite.com username password...
Joomla 1.5.x < 5.4.9 / 6.0.x < 6.1.4 Multiple Vulnerabilities (joomla-6-1-4-5-4-9-security-bugfix-release)
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.5.x prior to 5.4.9 or 6.0.x prior to 6.1.4. It is, therefore, affected by multiple vulnerabilities. - Joomla! Core - 20260902 - Core - Unauthorized user account creation via profile.save controll...
CVE-2026-84646
A flaw was found in Jenkins. An attacker with Overall/Read permission can exploit a deserialization vulnerability where user objects can appear as nested field values in other deserialized XML objects. By submitting crafted XML, the attacker can create unauthorized user objects. While these creat...
BIT-AUTHENTIK-2022-46145 authentik vulnerable to unauthorized user creation and potential account takeover
authentik is an open-source identity provider. Versions prior to 2022.11.2 and 2022.10.2 are vulnerable to unauthorized user creation and potential account takeover. With the default flows, unauthenticated users can create new accounts in authentik. If a flow exists that allows for email-verified...
CVE-2015-20117
The CVE-2015-20117 entry concerns RealtyScript 4.0.2 from Next Click Ventures. A cross-site request forgery vulnerability allows unauthenticated attackers to create unauthorized user accounts and administrative users by crafting requests to /admin/addusers.php and /admin/editadmins.php, enabling ...
CVE-2015-20117 RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation
Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user accounts and administrative users by crafting malicious forms. Attackers can submit hidden form data to /admin/addusers.php and...
CVE-2023-40918
KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role...
Palantir Control Panel 安全漏洞
Palantir Control Panel is a centralized management console from Palantir USA. A security vulnerability exists in Palantir Control Panel that stems from a lack of organizational access checks that could lead to unauthorized user creation...
CVE-2025-56009
The KeeneticOS operating system, developed by the German company Keenetic, is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in versions prior to 4.3 . The vulnerability exists within the "/rci" API endpoint , allowing a remote attacker to trick a victim into visiting a malicious page. If...
KeeneticOS 安全漏洞
KeeneticOS is an operating system from the German company Keenetic. A security vulnerability exists in KeeneticOS versions prior to 4.3, which stems from the presence of CRLF injection in the /auth API endpoint, which could lead to an attacker taking over the device by adding additional users wit...
CVE-2025-54603
An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users...
EUVD-2025-34434
An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users...
CVE-2025-54603
An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users...
CVE-2025-54603: Improper Access Control
An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users...
CVE-2025-54603
An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users...
CVE-2025-54603
An incorrect OpenID Connect (OIDC) authentication flow in Claroty Secure Access versions 3.3.0 through 4.0.2 allows for unauthorized user creation or the impersonation of existing OIDC users. To remediate this vulnerability, users are recommended to update Claroty Secure Access to a version later...
CVE-2025-54603
An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users...
EUVD-2019-5660
Malware in sbrugna...