CVE-2025-15385

CVE-2025-15385 affects TECNO Mobile com.Afmobi.Boomplayer v7.4.63. The Red Hat/NVD/CVE clusters and related sources describe an Insufficient Verification of Data Authenticity that permits authentication bypass. The CVSS 3.1 vector indicates a network-exposed, high-severity flaw with no privileges...

CVE-2025-15385

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...

CVE-2025-15385

Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63...

PT-2026-1364

Name of the Vulnerable Software and Affected Versions TECNO Mobile com.Afmobi.Boomplayer version 7.4.63 Description A flaw exists in TECNO Mobile com.Afmobi.Boomplayer that allows for authentication bypass due to insufficient verification of data authenticity. Recommendations At the moment, there...

Security Bulletin: IBM Storage Ceph is vulnerable to Insufficient Verification of Data Authenticity in RGW (CVE-2024-48916)

Summary Ceph Rados Gateway RadosGW OIDC provider is used by IBM Storage Ceph in RGW. CVE-2024-48916 This bulletin identifies the steps to take to address the vulnerability in Ceph. Vulnerability Details CVEID:CVE-2024-48916 DESCRIPTION: Ceph is a distributed object, block, and file storage...

The vulnerability of the atmtcp_recv_control() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the atmtcprecvcontrol function in the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to cause service failures...

CVE-2025-63434

The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages containing executable code without performing a cryptographic integrity or authenticity check on their contents. An attacker who can control th...

CVE-2025-12978 CVE-2025-12978

Fluent Bit inhttp, insplunk, and inelasticsearch input plugins contain a flaw in the tagkey validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed acces...

CVE-2025-12978 CVE-2025-12978

Fluent Bit inhttp, insplunk, and inelasticsearch input plugins contain a flaw in the tagkey validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed acces...

CVE-2025-12978

Fluent Bit’s input plugins in_http, in_splunk, and in_elasticsearch have a flaw in tag_key validation that does not enforce exact key-length matching. This lets crafted tag prefixes be treated as full matches, enabling a remote attacker with access to those endpoints to manipulate tags and redire...

EUVD-2025-198965

The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages containing executable code without performing a cryptographic integrity or authenticity check on their contents. An attacker who can control th...

CVE-2025-63434

CVE-2025-63434 affects Xtooltech Xtool AnyScan Android Application (versions up to 4.40.40). The update mechanism downloads and extracts update packages containing executable code without cryptographic integrity or authenticity checks. If an attacker can control update metadata, they can serve a ...

Fluent Bit 安全漏洞

Fluent Bit is an open source log processing and analyzing system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from a failure to properly implement the security.users authentication mechanism, which could lead to a remote attacker sending...

CVE-2025-63434

The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts update packages containing executable code without performing a cryptographic integrity or authenticity check on their contents. An attacker who can control th...

Towards a Formal Verification of Secure Vehicle Software Updates

With the rise of software-defined vehicles SDVs, where software governs most vehicle functions alongside enhanced connectivity, the need for secure software updates has become increasingly critical. Software vulnerabilities can severely impact safety, the economy, and society. In response to this...

Siemens SIMATIC S7-1500 Insufficient Verification of Data Authenticity (CVE-2021-22947)

When curl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade...

Siemens SIMATIC S7-1500 Insufficient Verification of Data Authenticity (CVE-2021-4122)

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...

Insufficient Verification of Data Authenticity

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the email address change. An attacker can cause unauthorized disclosure of information by updating their profile with an email address they do...

The vulnerability of Moxa TN-4500A, TN-5500A, TN-G4500, and TN-G6500 series router microprogramming software lies in the insufficient verification of data authenticity. This allows attackers to inject invalid node headers, redirect users to another website.

The vulnerability of Moxa’s TN-4500A, TN-5500A, TN-G4500, and TN-G6500 series router microprogramming software lies in the insufficient verification of data authenticity during the processing of HTTP headers. Exploiting this vulnerability allows a malicious actor to inject invalid node headers,...

Light & Wonder Deck Mate 安全漏洞

Light & Wonder Deck Mate is an automated licensing device from Light & Wonder, UK. A security vulnerability exists in the Light & Wonder Deck Mate that originates from executing firmware directly from an external EEPROM without verifying authenticity or integrity, which could lead a physically...