Lucene search
K

22 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/10/08 12:0 a.m.2 views

(0Day) Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to an SAS token. An attacker can leverage this vulnerability to launch a supply-chain...

9.4CVSS9.8AI score0.01558EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2025/10/08 12:0 a.m.3 views

(0Day) Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to a storage account token. An attacker can leverage this...

9.1CVSS9.5AI score0.00182EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-31500

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00151EPSS
Exploits1References1
The Hacker News
The Hacker News
added 2025/09/24 1:55 p.m.3 views

Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models

Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the system to artificial intelligence AI model tampering and supply chain risks. The critical-rated vulnerabilities in question, discovered by Trend Micro, ar...

9.4CVSS8AI score0.01558EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/09/19 9:26 p.m.3 views

CVE-2025-10644

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS8AI score0.01558EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/19 9:26 p.m.3 views

CVE-2025-10643

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS7.1AI score0.00182EPSS
Exploits0References1
OSV
OSV
added 2025/09/17 9:15 p.m.1 views

CVE-2025-10644

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS6.2AI score0.01558EPSS
Exploits0References1
NVD
NVD
added 2025/09/17 9:15 p.m.4 views

CVE-2025-10643

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS0.00182EPSS
Exploits0References1
OSV
OSV
added 2025/09/17 9:15 p.m.1 views

CVE-2025-10643

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS5.9AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/17 8:41 p.m.2 views

CVE-2025-10644 Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS9.7AI score0.01558EPSS
Exploits0References1
CVE
CVE
added 2025/09/17 8:41 p.m.22 views

CVE-2025-10644

CVE-2025-10644 affects Wondershare Repairit and involves SAS token permission misconfigurations that allow authentication bypass and could enable remote code execution on customer endpoints. The vulnerability arises from overly permissive permissions granted to a storage account token, per ZDI-25...

9.4CVSS7.6AI score0.01558EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/17 8:41 p.m.5 views

CVE-2025-10644 Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS0.01558EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/17 8:41 p.m.2 views

CVE-2025-10643 Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS9.3AI score0.00182EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/17 8:41 p.m.7 views

CVE-2025-10643 Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS0.00182EPSS
Exploits0References1
CVE
CVE
added 2025/09/17 8:41 p.m.20 views

CVE-2025-10643

Wondershare Repairit contains an authentication bypass vulnerability (CVE-2025-10643) caused by incorrect permissions for a storage account token. The flaw allows remote attackers to bypass authentication on affected installations, with CVSS3 base score 9.1 (CRITICAL) and an attack vector of NETW...

9.1CVSS6.7AI score0.00182EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.2 views

PT-2025-38265

Name of the Vulnerable Software and Affected Versions Wondershare Repairit affected versions not specified Description The software contains an authentication bypass due to incorrect permission assignment of SAS tokens. This allows unauthorized access. Recommendations At the moment, there is no...

9.4CVSS9.6AI score0.01558EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.2 views

Wondershare Repairit 安全漏洞

Wondershare Repairit is a file repair software from Wondershare UK. A security vulnerability exists in Wondershare Repairit that stems from improperly assigned storage account token permissions, which could lead to authentication bypass...

9.1CVSS9.4AI score0.00182EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.3 views

PT-2025-38264

Name of the Vulnerable Software and Affected Versions Wondershare Repairit version 6.5.2 Wondershare Repairit affected versions not specified Description The software contains an authentication bypass issue stemming from incorrect permission assignments within a storage account token. This allows...

9.1CVSS9.6AI score0.00182EPSS
Exploits0References17
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.2 views

Wondershare Repairit 安全漏洞

Wondershare Repairit is a file repair software from Wondershare UK. A security vulnerability exists in Wondershare Repairit that stems from improperly assigned SAS token permissions, which could lead to authentication bypass and remote code execution...

9.4CVSS9.9AI score0.01558EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:33 a.m.6 views

CVE-2023-27764

An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairitsetupfull5913.exe file...

7.8CVSS7.9AI score0.00151EPSS
Exploits1References1
Rows per page
Query Builder