152 matches found
EUVD-2024-49495
Malicious code in bioql PyPI...
EUVD-2025-17757
Malicious code in bioql PyPI...
EUVD-2024-34047
Malicious code in bioql PyPI...
EUVD-2022-49133
Malicious code in bioql PyPI...
CVE-2025-53859 NGINX ngx_mail_smtp_module vulnerability
NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happe...
CVE-2025-52997 File Browser Insecurely Handles Passwords
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.34.1, a missing password policy and brute-force protection makes the authentication process insecure. Attackers could mount a...
CVE-2025-0051
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...
CVE-2025-0052
Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Service...
CVE-2025-0051
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...
CVE-2025-0051 FlashArray DOS Vulnerability
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...
CVE-2025-0051 FlashArray DOS Vulnerability
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...
CVE-2025-0051: Improper Input Validation
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...
Pure Storage FlashArray 输入验证错误漏洞
Pure Storage FlashArray is an all QLC flash storage array from Pure Storage, Inc. A security vulnerability exists in Pure Storage FlashArray that originates from improper input validation during the authentication process, which could result in a system denial of service...
Exploit for CVE-2025-49113
CVE-2025-49113 - Roundcube Remote Code Execution A proof-of-c...
PT-2025-22895 · Unknown · M3M Printer Server Web
Name of the Vulnerable Software and Affected Versions: M3M Printer Server Web affected versions not specified Description: A user enumeration issue exists in the user authentication process, where differing error messages could allow an attacker to determine if a username is valid, potentially...
CVE-2020-35138
The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/password details during the authentication process, as demonstrated by Mobile@Work aka com.mobileiron. The key is in the...
CVE-2020-27523
Solstice-Pod up to 5.0.2 WEBRTC server mishandles the format-string specifiers %x; %p; %c and %s in the screenkey, displayname, browsername, and operationsystem parameter during the authentication process. This may crash the server and force Solstice-Pod to reboot, which leads to a denial of...
CVE-2019-7228
The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack...
CVE-2025-42602
This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process. A remote attacker could exploit this vulnerability by intercepting and manipulating the responses through API request body leading to...
Meon KYC 授权问题漏洞
Meon KYC is a solution from Meon India. Meon KYC suffers from an authorization issue vulnerability that stems from the mishandling of access and refresh tokens by certain API endpoints during the authentication process, which could lead to unauthorized access to other user accounts...