CVE-2024-55591

CVE-2024-55591 PoC This repository contains an PoC Proof of Concept for CVE-2024-55591 , a critical authentication bypass vulnerability discovered in Fortinet's FortiOS and FortiProxy products. Vulnerability Overview CVE-2024-55591 is an authentication bypass vulnerability caused by an alternativ...

JDBC driver pgjdbc Unprotected Channel

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to the use of an unprotected alternative channel. Exploiting this vulnerability can enable a malicious actor to disclose sensitive information...

OpenSSH Cryptographic Protection Mechanism Data Compromise

The vulnerability of the OpenSSH cryptographic protection lies in the use of an unprotected alternative channel. Exploiting this vulnerability could allow a attacker to compromise the integrity of data...

Security Component DoS

The vulnerability of the Security component in Firefox ESR, Firefox, and the Thunderbird email client involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

RoundCube Webmail Unauthorized Access

The vulnerability of the RoundCube Webmail email client is related to the use of an unprotected alternative communication channel. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Grafana AI Module Info Disclosure

The vulnerability of the Grafana monitoring and observation platform’s AI module relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms and disclose sensitive information by...

Fortinet FortiManager FortiAnalyzer Auth Bypass

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, relates to bypassing authentication by using an alternative path or channel. Exploiting this...

D-Link DSL-225 Router Authentication Bypass

The vulnerability of D-Link DSL-225 router microprogramming software relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and gain increased privileges...

Intel Memory and Storage Tool Privilege Escalation

The vulnerability of the Intel Memory and Storage Tool software for monitoring and managing RAM and solid-state drives is related to the situation of competing when accessing an alternative channel. Exploiting this vulnerability can allow a hacker to enhance their privileges...

Intel Service Data Protection

The vulnerability of Intel microprogramming software is related to insufficient protection of service data through the use of an alternative channel. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...