1302 matches found
EUVD-2024-43270
Malicious code in bioql PyPI...
EUVD-2023-31703
Malicious code in bioql PyPI...
EUVD-2023-51629
Malicious code in bioql PyPI...
EUVD-2025-24944
Malicious code in bioql PyPI...
Insufficient Verification of Data Authenticity
Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the SAML authentication component. An attacker can obtain authentication tokens belonging to another user by crafting a phishing login URL containing attacker-controlled publicKey and...
CVE-2024-13990
MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...
CVE-2024-13990
MicroWorld eScan AV’s update mechanism lacked cryptographic verification, allowing an on-path attacker to perform a MITM and substitute malicious update payloads. The affected component (update loader/installer payloads) could be executed or loaded, enabling remote code execution on vulnerable sy...
CVE-2024-13990 MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates
MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient verification of data authenticity, allowing attackers to trigger service failures.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient verification of data authenticity. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
Linux Distros Unpatched Vulnerability : CVE-2020-23906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...
CVE-2025-9379
A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...
CVE-2025-9379
A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...
CVE-2025-9379 Belkin AX1800 Firmware Update data authenticity
A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...
CVE-2025-9379 Belkin AX1800 Firmware Update data authenticity
A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...
Belkin AX1800 数据伪造问题漏洞
The Belkin AX1800 is a wireless router from Belkin Canada. A data forgery issue vulnerability exists in the Belkin AX1800 version 1.1.00.016, which stems from insufficient validation of data authenticity and could lead to remote attacks...
PT-2025-34552 · Belkin · Belkin Ax1800
Name of the Vulnerable Software and Affected Versions: Belkin AX1800 version 1.1.00.016 Description: A vulnerability exists due to insufficient verification of data authenticity within the Firmware Update Handler component. This issue can be exploited remotely. The vendor was contacted regarding...
Tenda AC15 Data Forgery Issue Vulnerability
Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 is vulnerable to a data forgery issue, which stems from insufficient data authenticity...
The vulnerability of the DNS Java dnsjava implementation lies in its insufficient verification of data authenticity, allowing attackers to circumvent security restrictions.
The vulnerability of the DNS Java dnsjava implementation is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
CVE-2025-8979
A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the function checkfwtype/splitfireware/checkfw of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack can be launched remotely. The...
CVE-2025-8980
A vulnerability has been found in Tenda G1 16.01.7.83660. Affected by this issue is the function checkuploadfile of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack may be launched remotely. The complexity of an attack is...