MinIO OIDC Privilege Escalation

The vulnerability of the OIDC server of MinIO is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

Adobe Animate Auth Bypass RCE

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

NATS Messaging System Authentication Bypass Privilege Escalation

The vulnerability of the NATS messaging system server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain increased privileges...

Portainer Decorate Container Creation Operation Data Access Modification

The vulnerability of the decorateContainerCreationOperation function in the Portainer container management platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to read and modify data remotely...

Microsoft Visual Studio Code Editor Privilege Escalation

The vulnerability of Microsoft Visual Studio Code’s editor is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Cargo Package Manager Non-canonical URL Path

The vulnerability of the Cargo package manager in the Rust programming language is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

Data Protection Software PowerProtect Data Domain Unauthenticated Access

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected...

Data Protection Software PowerProtect Data Domain Unauthenticated Access

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass existing security...

Jolokia Code Execution

The vulnerability of the Jolokia component in the Apache ActiveMQ software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Siemens Software Center Man-in-the-Middle

The vulnerabilities of the software for loading, installing, and activating Siemens Software Center, as well as the tools for design and simulation such as Siemens Solid Edge, Simcenter 3D, and Simcenter Femap, along with the simulation software based on Computational Fluid Dynamics like Simcente...

Windows Active Directory Management Reporting Spear Phishing

The vulnerability of the Windows Active Directory operating system management and reporting software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows attackers to carry out spear-phishing attacks...

Fortinet FortiSOAR Data Compromise

The vulnerability of the application software interface of the software platform for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to deficiencies in authentication procedures. Exploiting this vulnerability could...

SAP S/4HANA ERP Authentication Bypass Data Compromise

The vulnerabilities of SAP S/4HANA and SAP ERP software platforms are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers operating remotely to compromise the integrity and accessibility of protected information...

SMB Server Privilege Escalation

The vulnerability of the SMB server for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges...

SMB Server Privilege Escalation

The vulnerability of the SMB server for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges...

📄 Extensis Portfolio Manager 4.0.1 Shell Upload

This Metasploit module exploits multiple vulnerabilities in Extensis Portfolio Server to achieve remote code execution. It leverages CVE-2022-24251 and related issues to upload a JSP webshell and execute arbitrary commands. Version 4.0.1 is affected...

NETMRI Authentication Bypass

The vulnerability of the NETMRI monitoring software relates to deficiencies in its authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Knomary TMS Auth Bypass

The vulnerability of the Knomary TMS training platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...