172860 matches found
CVE-2026-84699
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow, allowing unauthenticated attackers to reset local account passwords and authenticate as those users, resulting in unauthorized access. The vulnerability is rated CVSS 3.1...
CVE-2026-84696 Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...
EUVD-2026-69787
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...
CVE-2026-84696 Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...
CVE-2026-84696
Phison PS3111-S11 controller firmware, in versions through SBFQT1.3 , exposes privileged vendor unique commands (VUC) over the ATA interface with absent or defeatable authentication. Attackers with local access can bypass a weak CRC-16 based unlock handshake or target builds lacking a VUC lock en...
f5-bigip-rce-cve-2020-5902
F5 BIG-IP RCE（CVE-2020-5902）漏洞检测工具 Summary 20200706，网上曝出F5 BIG-IP TMUI RCE漏洞。 F5 BIG-IP的TMUI组件（流量管理用户界面）存在认证绕过漏洞，该漏洞在于Tomcat解析的URL与request.getPathInfo存在差异，导致可绕过权限验证，未授权访问TMUI模块所有功能，进而可以读取/写入任意文件，命令执行等。 详情参考F5 BIG-IP TMUI RCE漏洞（CVE-2020-5902）重现及注意点...
EUVD-2026-69725
WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid HMAC tokens using the public site URL and current time. Attackers can forge authentication tokens by computing hashhmac with the site's...
EUVD-2026-69726
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...
EUVD-2023-60613
Proxmox Virtual Environment VE 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supplying an arbitrary tfa-challenge value ...
EUVD-2026-69707
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...
CVE-2025-32433
Erlang/OTP SSH 远程代码执行漏洞，问题根源在于SSH协议的消息处理机制存在缺陷，攻击者可在认证完成前发送连接协议消息。值得注意的是，该漏洞影响所有运行SSH服务器组件的Erlang/OTP版本，与底层系统版本无关。 LINUX下编译：gcc CVE-2025-32433.c -o sshexp...
CVE-2023-32315-Openfire-Bypass
CVE-2023-32315 0x01 获取返回的JSESSIONID和csrftoken ,构造请求包新增用户替换JSESSIONID、csrftoken root@kitploit: cd CVE-2023-32315-Openfire-Bypass/scanall go mod tidy go run main.go -u http://openfire.com:9090 0x02 插件编译安装 root@kitploit: mvn clean package 或 releases下载插件 0x03 上传插件 0x04 得到webshel 0x05 执行命令...
CVE-2024-45409
Ruby-SAML / GitLab 认证绕过 CVE-2024-45409 漏洞利用 该脚本利用了 CVE-2024-45409 漏洞，允许未经身份验证的攻击者访问 IDP 签发的任何 SAML 文档，从而伪造 SAML 响应/断言，并以任意用户身份登录 GitLab。 以下 GitLab（CE/EE）版本均受影响： 您正在被 重定向。 参考 https://about.gitlab.com/releases/2024/09/17/patch-release-gitlab-17-3-3-released/ https://github.com/advisories/GHSA-j...
CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass
ConnectWise ScreenConnect: Omisión de Autenticación Introducción Este proyecto tiene como objetivo explotar una vulnerabilidad de omisión de autenticación en ConnectWise ScreenConnect. Proporciona un script para demostrar el exploit. Asegúrese de tener los permisos necesarios antes de intentar us...
CVE-2022-46169_unauth_remote_code_execution
CVE-2022-46169 - Cacti에서의 인증되지 않은 원격 코드 실행 Cacti 1.2.23 및 1.3.0에서 인증 우회 및 명령 삽입을 통한 인증되지 않은 원격 코드 실행 면책 조항: 이 스크립트는 시스템의 보안을 감사하기 위해 제작되었습니다. 이 스크립트는 본인 소유의 시스템 또는 악용에 대한 서면 허가를 받은 시스템에서만 사용하십시오...
PT-2026-84578
Name of the Vulnerable Software and Affected Versions Team Password Manager versions prior to 14.184.308 Description An issue exists where the software fails to enforce authentication requirements during the local account password reset flow. This allows unauthenticated attackers to reset local...
JFrog Artifactory Improper Authentication Vulnerability
JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges...
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability...
CVE-2024-35585
Oxford Nanopore MinKNOW , a sequencing software used in nanopore-based genomic analysis, is vulnerable to weak authentication in versions before 24.06 . The application relies on a client's source IP address as its authentication mechanism, meaning an attacker who can spoof or originate traffic f...