135804 matches found
CVE-2026-103659 MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes
MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...
EUVD-2026-90575
MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...
CVE-2026-103659 MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes
MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...
EUVD-2026-90550
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
CVE-2026-103655
The MISP platform (versions
CVE-2026-103655 MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
CVE-2026-103655 MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
CVE-2021-44270
CVE-2021-44270 Anviz-Access-Control-Authentication-Bypass https://nvd.nist.gov/vuln/detail/CVE-2021-44270...
CVE-2023-23752-EXPLOIT
CVE-2023-23752 - Joomla: Verificación de Acceso Incorrecta Se ha identificado un problema en las versiones 4.0.0 a 4.2.7 de Joomla. Esta vulnerabilidad está relacionada con una verificación de acceso incorrecta dentro de la aplicación, lo que permite el acceso no autorizado a endpoints críticos d...
Meari IoT Cloud Platform OpenAPI Service
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization. 2. RECOMMENDED...
CVE-2026-80275
The Comelit Multi-User Gateway for VIP System (model 1456B) is vulnerable in firmware versions 2.9.1 and 2.10.0 due to a failure to enforce server-side authorization on an administrative password-change function. This flaw allows an authenticated user level to invoke the function and overwrite th...
CVE-2018-10933
CVE-2018-10933 - SSH 認証バイパス PoC 説明 CVE-2018-10933 は、libssh のサーバーサイド実装における認証バイパスの脆弱性です。この欠陥により、攻撃者は事前の認証なしに SSH2MSGUSERAUTHSUCCESS メッセージを送信し、不正アクセスを得ることができます。 影響を受けるシステム SSH サービスに脆弱なバージョンの libssh を使用しているすべてのサーバーが影響を受けます。 影響を受けるバージョン libssh 0.6 以上 修正バージョン: 0.7.6 および 0.8.4 使用方法 1. スクリプト内の ip をターゲットの...
CVE-2026-82829
Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82825
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. Thi...
CVE-2026-12241
The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the 'savemetaboxes' function in all versions up to, and including, 2.51. This makes it possible for authenticat...
CVE-2026-82825
The Hitachi Coding Software Suite (versions through 3.3.0) is vulnerable to a Missing Authentication for Critical Function flaw. This vulnerability allows an unauthenticated attacker to invoke a critical API, which may lead to the unauthorized retrieval or alteration of sensitive information, or ...
CVE-2026-82825 Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. Thi...
EUVD-2026-90494
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. Thi...
CVE-2026-82829 Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process
Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82829
The Hitachi Coding Software Suite (affected versions through 3.3.0 ) contains a Hidden Functionality vulnerability. An attacker can exploit hidden accounts or hard-coded credentials to gain unauthorized access without undergoing the legitimate authentication process. The impact is categorized as ...