583 matches found
WordPress plugin WP REST API FNS 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-33559
Name of the Vulnerable Software and Affected Versions Najeeb Ahmad Simple User Registration versions n/a through 5.5 Description The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability. This vulnerability allows for authentication bypass, potentially...
Siemens HiMed Cockpit Alternate Path Improper Protection Vulnerability
The HiMed Cockpit is a multimedia terminal for infotainment and other applications, including supporting medical procedures at the bedside of hospital patients. Siemens HiMed Cockpit suffers from an improperly protected alternate path vulnerability that could be exploited by an unauthenticated,...
Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity
TeamCity Exploit Cve 2023 42793 A quick script to exploit the...
Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity
CVE-2023-42793 TeamCity CVE-2023-42793 RCE Remote Code Execu...
CVE-2024-6684
Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Authentication Bypass. This issue affects inohom Nova Panel N7: through 1.9.9.6. NOTE: The vendor was contacted and it was learned that the product is not supported...
The vulnerability of microprogrammed software in Toshiba e-STUDIO multifunctional devices, related to bypassing the authentication process through an alternative path or channel, allows attackers to circumvent security restrictions and load arbitrary files.
The vulnerability of the microprogramming software in Toshiba e-STUDIO multifunctional devices relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions and load arbitrary fil...
CVE-2024-38437
D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...
CVE-2024-38437
The CVE-2024-38437 entry relates to a D-Link router authentication bypass (CWE-288) in the DSL-225 model, described as exploitable via an alternate path or channel. According to PT-2024-5347, the issue allows a remote attacker to bypass authentication and potentially elevate privileges. No specif...
CVE-2024-38437 D-Link - CWE-288: Authentication Bypass Using an Alternate Path or Channel
D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity
CVE-2024-27198: Authentication bypass in Jetbrain Teamcity leads...
CVE-2024-5620
Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass. This issue affects Apinizer Management Console: before 2024.05.1...
PT-2024-4369 · Unknown · Session Smart Conductor +2
Name of the Vulnerable Software and Affected Versions: Session Smart Router versions prior to 5.6.15 Session Smart Router versions 6.0 through 6.1.9-lts Session Smart Router versions 6.2 through 6.2.5-sts Session Smart Conductor versions prior to 5.6.15 Session Smart Conductor versions 6.0 throug...
The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) JetBrains TeamCity, related to bypassing the authentication process by using an alternative path or channel, allows attackers to circumvent the authentication process and gain increased privileges.
The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authenticatio...
PT-2024-3856 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2022.04.7 JetBrains TeamCity versions prior to 2022.10.6 JetBrains TeamCity versions prior to 2023.05.6 JetBrains TeamCity versions prior to 2023.11.5 Description: The issue is related to an authentication...
The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, related to bypassing the authentication process by using an alternative path or channel, allows a hacker to execute arbitrary code.
The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with...
ConnectWise ScreenConnect Service < 23.9.8 Multiple Vulnerabilities
According to its version, the ConnectWise ScreenConnect Service remote access software installed on the remote Windows host is prior to 23.9.8. It is, therefore affected by multiple vulnerabilities: - A path-traversal vulnerability which may allow an attacker the ability to execute remote code or...
CVE-2024-1709
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems...
ConnectWise ScreenConnect Security Breach
ConnectWise ScreenConnect is a self-hosted remote desktop software application from ConnectWise. A security vulnerability exists in ConnectWise ScreenConnect version 23.9.7 and prior versions, which stems from being affected by the use of an alternate path or channel to bypass authentication, and...