CVE-2024-33676

CVE-2024-33676 Weak authentication and authorization on Enel X JuiceBox Level 2 EV charger enables access to operating system functions and parameters. Description Users on the local EV charger WLAN network can extract PII, change settings, and manipulate the operating system file system. This is...

sj

sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...

CVE-2025-70994

CVE-2025-70994: Weak Authentication in Yadea T5 Electric Bicycle !WARNING This repository is published strictly for educational and academic security research purposes. The information and proof-of-concept code provided here are intended to demonstrate a known cryptographic flaw CWE-1390 to assis...

CVE-2026-107283

A flaw was found in AsyncHttpClient. This vulnerability can weaken authentication security because the Realm.Builder component generates HTTP Digest client nonces—unique values used to protect against replay and precomputation attacks—using an insecure random number generator instead of a...

nessus-metasploit-lab

Découverte et Exploitation de Vulnérabilités — Nessus & Metasp...

AttackTomcat

AttackTomcat Vulnerability Detection List CVE-2017-12615 PUT file upload vulnerability tomcat-pass-getshell weak authentication deployment war package Weak password brute force CVE-2020-1938 Tomcat file read/inclusion Usage Before first use, please reset the configuration file in settings. For...

ls-poc

CVE-2026-30368 Proof of concept !IMPORTANT This is patched and now requires credentials, use the workaround to perform actions on yourself. Introduction CVE-2026-30368 allows an attacker to control student devices via a weak authentication flaw in Lightspeed Classroom management. The POC poc.js...

CVE-2026-115967

The Hamid Alinia Login with phone number (login-with-phone-number) plugin for WordPress is vulnerable to a Weak Authentication vulnerability (CWE-1390) in versions up to and including 1.8.78 . This flaw allows for Authentication Abuse , potentially leading to unauthorized access. The impact inclu...

CVE-2026-115967: Hamid Alinia Login with phone number: Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication…

Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication Abuse.This issue affects Login with phone number: from n/a through 1.8.78...

WordPress OTP Login With Phone Number, OTP Verification authorization issue vulnerability

WordPress OTP Login with Phone Number and OTP Verification versions 1.8.78 and earlier contain an authorization issue vulnerability. This vulnerability stems from weak authentication mechanisms and may lead to unauthorized authentication attempts...

Microsoft PowerToys < 0.102.0 Tampering (October 2026)

The version of Microsoft PowerToys installed on the remote host is affected by a tampering vulnerability as referenced in the October 2026 Microsoft Security Update advisory. - Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally. CVE-2026-83681 No...

CVE-2026-88101

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2026-85939

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...

CVE-2026-85922

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-85376

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-85323

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

CVE-2026-83840

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83681

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

CVE-2026-83674

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-83657

Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...