CVE-2026-8794: Observable Timing Discrepancy

PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a...

PT-2026-66453

Name of the Vulnerable Software and Affected Versions Eaton Tripp Lite PADM firmware affected versions not specified Description Improper input validation in the authentication component allows an unauthenticated remote attacker to bypass authentication and gain privileged user access to the...

CVE-2026-22620: Improper Neutralization of Special Elements used in an SQL Command

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...

CVE-2026-15429

A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be abl...

PT-2026-55117

A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an...

[SECURITY] Fedora 44 Update: qt6-qtnetworkauth-6.10.3-1.fc44

Qt6 - NetworkAuth component...

The vulnerability of the md4sum() function in the NTLM component of the access library for HTTP servers allows a hacker to cause a service failure.

The vulnerability of the md4sum function in the NTLM component of the HTTP server access library LibSoup is related to the escape of an operation beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

CVE-2024-2378

A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privileges on af-fected installations...

The vulnerability of the AuthN component in the distributed storage system for NVIDIA AIStore-based AI applications allows a perpetrator to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of the AuthN component in the NVIDIA AIStore distributed storage system for AI-based applications relates to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain unauthorized access to protected...

CVE-2025-33185

NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A successful exploit of this vulnerability may lead to information disclosure...

PT-2025-46376

Name of the Vulnerable Software and Affected Versions NVIDIA AIStore affected versions not specified Description NVIDIA AIStore contains a security flaw in the Authentication AuthN component. A successful exploit of this issue may lead to escalation of privileges, information disclosure, and data...

EUVD-2008-2599

Malware in sbrugna...

EUVD-2008-2270

Malware in sbrugna...

EUVD-2011-3480

Malware in sbrugna...

EUVD-2024-1151

Malicious code in bioql PyPI...

EUVD-2023-28590

Malicious code in bioql PyPI...

EUVD-2022-48412

Malicious code in bioql PyPI...

CVE-2024-28056

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains present, and consequently...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

PT-2025-6118 · Code Projects · Code-Projects Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: code-projects Vehicle Parking Management System version 1.0 Description: A critical issue was found in the Authentication component, specifically affecting the login function. The manipulation of the username argument leads to a stack-based...