775 matches found
ls-poc
CVE-2026-30368 Proof of Concept !IMPORTANT Dies ist gepatcht und erfordert nun Anmeldedaten. Verwende den Workaround, um Aktionen an dir selbst durchzuführen. Einleitung CVE-2026-30368 ermöglicht es einem Angreifer, Schüler-Geräte über eine Schwachstelle in der schwachen Authentifizierung von...
CVE-2024-33676
CVE-2024-33676 Autenticazione e autorizzazione deboli sul caricatore EV Enel X JuiceBox Level 2 consentono l'accesso alle funzioni e ai parametri del sistema operativo. Descrizione Gli utenti sulla rete WLAN locale del caricatore EV possono estrarre PII, modificare le impostazioni e manipolare il...
AttackTomcat
AttackTomcat Elenco delle vulnerabilità rilevate CVE-2017-12615 Vulnerabilità di caricamento file PUT tomcat-pass-getshell Deploy di pacchetti war con autenticazione debole Brute force su password deboli CVE-2020-1938 Lettura/inclusione di file in Tomcat Utilizzo Prima del primo utilizzo, imposta...
sj
sj Swagger Jacker sj è uno strumento da riga di comando progettato per assistere nell'audit di file di definizione Swagger/OpenAPI esposti, controllando gli endpoint API associati per autenticazione debole. Fornisce anche modelli di comandi per test manuali di vulnerabilità. Lo fa analizzando il...
CVE-2026-65098
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
EUVD-2026-66095
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-65098
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow that allows an attacker to cause weak authentication . A successful exploit could lead to code execution , information disclosure , and data tampering . The CVSS 3.1 score is 8.1 (HIGH) , with a network attack...
CVE-2026-65098
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2025-70994
CVE-2025-70994: Autenticazione Debole in Bicicletta Elettrica Yadea T5 !WARNING Questo repository è pubblicato esclusivamente a scopo educativo e di ricerca accademica sulla sicurezza. Le informazioni e il codice di proof-of-concept qui forniti hanno lo scopo di dimostrare un noto difetto...
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-68067 Mira Hormone Monitor, Mira Android App Weak Authentication
The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and...
CVE-2026-68067
The CVE concerns Mira Hormone Monitor / Mira Android App with a weak authentication issue in the cloud login API. The login endpoint accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. Attack scenario: ...
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
EUVD-2026-56313
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
Microsoft Windows Search Component Information Disclosure Vulnerability
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
PT-2026-70414
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Weak authentication in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally, which can affect the system...
CVE-2026-47882
CVE-2026-47882 affects Spring Tools for Eclipse (5.2.0 and earlier) where Spring Tools DevTools remote-restart uploads authenticate with a shared secret generated by a non-cryptographic PRNG. Root cause: secret generation relies on non-cryptographic randomness, weakening authenticity of remote-re...