The vulnerability of the TrueConf Server software, related to deficiencies in the authentication process, allows a perpetrator to obtain a token with administrator privileges.

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...

Session-Fixation-in-Vvveb-CMS-v1.0.6.1

Фиксация сессии в Vvveb CMS v1.0.6.1 Автор: Andrew Paul Дата обнаружения: 9 июня 2025 Вендор: Vvveb URL вендора: http://vvveb.com GitHub вендора: https://github.com/givanz/Vvveb Затронутая версия: 1.0.6.1 и, вероятно, предыдущие версии CVE ID: CVE-2025-8517 Краткое описание В механизме...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

CVE-2024-9014

Этот пост — исследовательская статья, опубликованная EQSTLab. CVE-2024-9014 ★ CVE-2024-9014 Уязвимость раскрытия конфиденциальной информации PoC ★ Description CVE-2024-9014 : pgAdmin4 Уязвимость раскрытия конфиденциальной информации Описание: версии pgAdmin 8.11 и более ранние уязвимы к ошибке...

CVE-2025-4162030

Консультация по безопасности: CVE-2025-4162030 Это сводка по безопасности предоставлена CoPilot ^1^. Контент, предоставленный на этом веб-сайте, доступен только в информационных целях и может быть доступен и использован поисковыми системами или языковыми моделями LLM при соблюдении следующих...

CVE-2026-85489

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...

CVE-2026-85489

An authentication flaw in the Brocade ASCG administrative management service component allows unauthenticated network users to issue direct API requests. This vulnerability enables attackers to perform privileged actions, such as accessing sensitive system configuration mapping data , modifying m...

EUVD-2026-94792

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...

CVE-2026-85489

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...

PT-2026-107858

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...

CVE-2026-106555

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts...

UBUNTU-CVE-2026-106555

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts...

CVE-2025-4162025

Уведомление о безопасности: CVE-2025-4162025 Содержимое, представленное на этом веб-сайте, предоставляется только в информационных целях и может быть доступно и использовано поисковыми системами или языковыми моделями LLM со следующими ограничениями: Содержимое может быть воспроизведено, обобщено...

CVE-2025-4162027

Уведомление о безопасности: CVE-2025-4162027 Содержание, предоставленное на этом сайте, предназначено только для информационных целей и может быть доступно и использовано поисковыми системами или языковыми моделями LLM со следующими ограничениями: Содержание может воспроизводиться, обобщаться или...

Unauthenticated Administrative REST API Access in Brocade ASCG before 3.5.0 (CVE-2026-85489)

An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...

Teen Hacker Finds Auth Flaw in Microsoft System With 17.3 Trillion Data Rows

A teen hacker found an authentication flaw in Microsoft’s Titan analytics service, where metadata indicated an estimated 17.3…...

CVE-2026-101878: Incorrect Implementation of Authentication Algorithm

Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the UserReadBySsoUserOrganizationIdExternalId stored procedure as NVARCHAR50 while the column it queries stores NVARCHAR300, silently truncating the SSO login identifier on SQL Server deployments and allowing a user...

The vulnerability of the Microsoft Authenticator multi-factor authentication application lies in its flawed authentication procedures, which allow attackers to circumvent these procedures and thereby increase their privileges.

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...

PT-2026-98283

Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware contains an authentication flaw in the root account accessible via the UART Universal Asynchronous Receiver-Transmitter, a hardware communication protocol interface. This...

The vulnerability of the Fortinet Privileged Access Agent for Chrome, related to authentication procedures’ flaws, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Fortinet Privileged Access Agent for Chrome is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...