1154 matches found
CVE-2024-3596 RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature...
CVE-2024-3596
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature...
CVE-2024-3596: Improper Validation of Integrity Check Value
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature...
KB5040437: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2024)
The remote Windows host is missing security update 5040437. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
MAL-2024-6725 Malicious code in authenticator_client (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in authenticator_client (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4787 Malicious code in authanticetor (PyPI)
--- -= Per source details. Do not edit below this line.=-...
PT-2024-27458
Name of the Vulnerable Software and Affected Versions JupyterHub versions prior to 5.0 OAuthenticator version prior to 16.3.1 Description The issue arises from a change in JupyterHub 5.0 where the allow all parameter takes precedence over the identity provider parameter when using...
HackerOne: Improper Authentication - 2FA OTP Reusable
Vulnerability description not provided...
Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)
Google on Monday announced that it's simplifying the process of enabling two-factor authentication 2FA for users with personal and Workspace accounts. Also called 2-Step Verification 2SV, it aims to add an extra layer of security to users' accounts to prevent takeover attacks in case the password...
Microsoft introduces passkeys for consumer accounts
Ten years ago, Microsoft envisioned a bold future: a world free of passwords. Every year, we celebrate World Password Day by updating you on our progress toward eliminating passwords for good. Today, we’re announcing passkey support for Microsoft consumer accounts, the next step toward our vision...
com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +24 more potentially affected by CVE-2023-6787 via org.keycloak:keycloak-services (15.1.0)
org.keycloak:keycloak-services MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...
CVE-2023-44039
In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker who can pass enrollment verifications and is allowed to enroll a FIDO key to register their FIDO authenticator to a victim’s account and consequently take over the account...
VeridiumID security vulnerability
VeridiumID is an integrated passwordless platform from VeridiumID. A security vulnerability exists in VeridiumID versions prior to 3.5.0. An attacker exploited the vulnerability to take over a victim's account by registering its FIDO authenticator to that account...
dapla-team-cli (>=0.0.4, <=0.1.2), dapla-toolbelt (>=1.3.7, <=1.8.2) +2 more potentially affected by CVE-2024-28233 via jupyterhub (3.1.1)
jupyterhub PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - dapla-team-cli =0.0.4, =1.3.7, =0.1.0, =0.2.1 - swmjupyter 0.1.3 Source cves: CVE-2024-28233 Source advisory: OSV:GHSA-7R3H-4PH8-W38G...
Microsoft Authenticator Privilege Escalation
The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Patch Tuesday, March 2024 Edition
Apple and Microsoft recently released software updates to fix dozens of security holes in their operating systems. Microsoft today patched at least 60 vulnerabilities in its Windows OS. Meanwhile, Apples new macOS Sonoma addresses at least 68 security weaknesses, and its latest update for iOS fix...
CVE-2024-21390
Microsoft Authenticator Elevation of Privilege Vulnerability...
