CVE-2024-6078

CVE-2024-6078 IMPACT An improper authentication vulnerability exists in the affected product, which could allow a malicious user to generate cookies for any user ID without the use of a username or password. If exploited, a malicious user could take over the account of a legitimate user. The...

The vulnerability of the authentication system for microprogrammed software in the FortiExtender signal booster allows attackers to circumvent security restrictions and enhance their privileges.

The vulnerability of the authentication system for microprogrammed software in the FortiExtender signal booster device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and enhance their privileges by sending...

D-Link G416 httpd API-AUTH Buffer Overflow Vulnerability

D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 , which supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a buffer overflow vulnerability, which stems from a stack-based buffer overflow remote...

D-Link G416 Authentication Vulnerability

D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 , which supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from an authentication vulnerability that stems from a lack of authentication in the httpd...

CVE-2024-35775

CVE-2024-35775 : Vulnerability in Slider by Soliloquy (Soliloquy Lite) for WordPress. The issue is an XSS due to improper input handling and missing authorization in the Slider component, affecting versions up to and including 2.7.6. The root cause is improper authentication/authorization around ...

Sony: 明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）

The WH-1000XM5 headphones were found to have an authentication vulnerability that allowed an attacker to connect to the device without going through the proper pairing process. This vulnerability could be combined with existing Bluetooth attacks to enable man-in-the-middle attacks...

CVE-2024-7208

A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain, thus bypass security measures provided by DMARC or SPF or DKIM policies...

Delphix Data Control Tower 安全漏洞

Delphix Data Control Tower Delphix DCT is a data control plane from Delphix, Inc. A security vulnerability exists in Delphix Data Control Tower versions prior to 19.0.0 that stems from the application's enable-scale-testing feature breaking authentication...

Webuzo 安全漏洞

Webuzo is a powerful and easy-to-use web hosting control panel from Webuzo Inc. Allows hosting providers and users to automate server administration tasks while providing customers with the tools they need to manage their sites. A security vulnerability exists in Webuzo that stems from an...

RHUB TurboMeeting 安全漏洞

RHUB TurboMeeting is a collaboration solution from RHUB Corp. It provides web conferencing, remote support, audio conferencing, video conferencing, remote access, and webinar support. A security vulnerability exists in RHUB TurboMeeting versions prior to 8.X. The vulnerability is caused by a remo...

Security Bulletin: Security Vulnerability fixed in IBM Security Directory Integrator (CVE-2022-33162)

Summary IBM Security Directory Integrator has addressed an issue where it did not perform authentication. Vulnerability Details CVEID:CVE-2022-33162 DESCRIPTION: IBM Security Directory Server does not perform any authentication for functionality that requires a provable user identity or consumes ...

krb5: GSS message token handling

A vulnerability was found in the MIT Kerberos 5 GSS krb5 wrap token, where an attacker can modify the plaintext Extra Count field, causing the unwrapped token to appear truncated to the application, occurs when the attacker alters the token data during transmission which can lead to improper...

Certification Vulnerabilities for Multiple SICAM Products Lacking Critical Functionality

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTUs are modular devices for remote control and automation applications in all areas of energy supply.The SICAM EGS is the gateway ...

The authentication mechanism of Siemens LOGO programmable logic controllers has vulnerabilities, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the authentication mechanism of Siemens’ programmable logic controller LOGO software relates to the use of a reversible one-way hash function. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...

Siemens CPCI85 Central Processing和SICORE Base system 访问控制错误漏洞

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTUs are modular devices for remote control and automation applications in all areas of energy supply.The SICAM EGS is the gateway ...

Triangle MicroWorks SCADA Data Gateway Authentication Missing Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A lack of authentication vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by remote attackers to obtain sensitive information...

Danfoss AK-SM800A Improper Authentication (CVE-2023-25913)

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. This plugin only works with Tenable.ot. Please visit...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jul-2024 Release 1 prior to version 1, which stems from an improper authentication issue...

CVE-2024-39375 Use of Client-Side Authentication in TELSAT marKoni FM Transmitter

TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges...

Progress Software MOVEit Transfer Security Vulnerability

Progress Software MOVEit Transfer is a suite of automated file transfer software from Progress Software, USA. The software supports file transfer and provides file transfer activity monitoring. A security vulnerability exists in Progress Software MOVEit Transfer that stems from an incorrect...