RemoteMouse 3.008 - Arbitrary Remote Command Execution Exploit

""" Exploit Title: Remote Mouse 3.008 Failure to Authenticate Date: 4/9/2019 Exploit Author: 0rphon Software Link: https://www.remotemouse.net/ Version: 3.008 Tested on: Windows 10 Remote Mouse 3.008 fails to check for authenication and will execute any command any machine gives it This script po...

DEBIAN-CVE-2017-2659

It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts...

CVE-2019-0261

Under certain circumstances, SAP HANA Extended Application Services, advanced model XS advanced does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 running on SAP HANA 1 or SAP HANA 2 SPS0 second S stands for stack...

The vulnerability of the connected authentication module of the Linux operating system PAM, which allows a hacker to trigger a service failure.

The vulnerability of the connected authentication module in the PAM operating system of Astra Linux relates to the inability for domain users to obtain token tokens during authentication when they lose connection to the domain server. Exploiting this vulnerability could allow a malicious actor to...

Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2019-02812)

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A cross-site scripting...

The vulnerability of the pnp-receive.sh service in the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 allows a hacker to write arbitrary data onto the device and exhaust the available disk space.

The vulnerability of the pnp-receive.sh service on the TeNIX programmable logic controllers MFC1500 and MFC3000 operating system is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to exhaust the device’s disk space by sending arbitrary...

Login Bypass Vulnerability in rejucms v2.1 Backend

rejucms is an online video web content management system CMS. A login bypass vulnerability exists in the backend of rejucms v2.1, which is caused by the failure of the program to authenticate login information, and can be exploited by an attacker to bypass login restrictions...

Siemens TIM 1531 IRC Authentication Missing Vulnerability

The Siemens TIM 1531 IRC is a communication module from Siemens, Germany. A security vulnerability exists in the Siemens TIM 1531 IRC prior to version 2.0, which originates from the device failing to properly authenticate itself when connecting on port 102/tcp. An attacker could use this...

CVE-2018-16095

In System Management Module SMM versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails...

Exploit for Race Condition in Openbsd Openssh

CVE-2018-15473 OpenSSH 7.7 - Username Enumeration Method T...

Storefront - Logon has expired

While accessing Storefront URL authentication failed. "Logon has expired"...

Unspecified vulnerability in Tinc VPN (CNVD-2019-43405)

Tinc VPN is a virtual private network VPN daemon that uses tunneling and encryption to create secure private networks between hosts on the Internet. A security vulnerability exists in Tinc VPN versions prior to 1.0.30 that stems from a failure of the authentication protocol. No details of the...

Unable to start application with SAML authentication "Cannot Start App" Event ID 28 Could not contact any Federated Authentication Servers

Launching an application or desktop fails when StoreFront is configured for FAS/SAML authentication. Error seen when user tries to launch an application or desktop: No errors are logged on the FAS server. Storefront will show event ID 28 with error showing "...Could not contact any Federated...

No active policy is found in Secondary authentication cascade Please contact your administrator.

With basic authentication on Citrix NetScaler Gateway or AAA, authentication fails for the client with the error: "No active policy is found in Secondary authentication cascade Please contact your administrator". In some firmware versions such as 10.5, the error seen may be: "Please contact your...

F5 BIG-IP HTTPS health monitors design vulnerability

F5 BIG-IP LTM and so on are the products of F5 Corporation in the U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager; BIG-IP HTTPS health monitors is one of the HTTPS status monitoring programs. A security vulnerability exists in F5 BIG-IP HTTPS...

NetScaler Gateway : Radius Authentication Fails Intermittently Despite RADIUS Server Accept

NetScaler Gateway Authentication Scenario 1: Gateway Page would present the authentication to be done in 2 factor. First the user enters the LDAP username and password. Now there would be 2 options either user can do the touch authentication present in the MFA Application or else can wait for the...

Fortinet FortiAuthenticator Cross-Site Scripting Vulnerability (CNVD-2018-10945)

Fortinet FortiAuthenticator is a user identity management appliance that enhances enterprise security by simplifying and centralizing the management and storage of user identity information. A cross-site scripting vulnerability exists in the "CSRF Authentication Failure" page in Fortinet...

Apache ZooKeeper Security Bypass Vulnerability

Apache Zookeeper is a software project of the U.S. Apache Apache Software Foundation, which can provide open source distributed configuration services, synchronization services and naming registry for large-scale distributed computing. A security vulnerability exists in Apache ZooKeeper versions...

Code execution vulnerability in multiple Lenovo products

Lenovo Flex System x240 M5 and others are server devices from the Chinese company Lenovo. A security vulnerability exists in a number of Lenovo products that originates from a program failing to properly authenticate itself before running signed code. An attacker in close physical proximity could...

OpenDaylight Helium Information Disclosure Vulnerability

Opendaylight, a project of the Linux Foundation, is a community-driven, open-source, software-defined networking framework that includes a collection of modules to perform networking tasks that need to be done quickly.OpenDaylight Helium is a version of it. A security vulnerability exists in the...