Edimax PS-1206MF Authentication Bypass

Title: Edimax PS-1206MF - Web Admin Auth Bypass Date: 30.08.15 Vendor: edimax.com Firmware version: 4.8.25 Author: Smash Contact: smash at devilteam.pl HTTP authorization is not being properly verified while sendind POST requests to .cgi, remote attacker is able to change specific settings or eve...

CVE-2014-0908

The User Attribute implementation in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.2, and 8.5.x through 8.5.0.1 does not verify authorization for read or write access to attribute values, which allows remote authenticated users to obtain sensitive information,...

CVE-2005-0409

CVE-2005-0409 affects CitrusDB 0.3.6 and earlier. The vulnerability arises because importcc.php and uploadcc.php do not perform proper authorization checks, allowing remote attackers to upload credit card data and learn the pathnames of temporary files storing that data, which can facilitate acce...