CVE-2019-16399

The CVE affects Western Digital WD My Book World through II devices (firmware 1.02.12 and earlier). The vulnerability stems from Broken Authentication via a hardcoded SSH credential path, enabling an attacker to access the /admin/ directory without credentials and login with the default root pass...

CVE-2019-16399: Use of Hard-coded Credentials

Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory without credentials. An attacker can easily enable SSH from /admin/systemadvanced.php?lang=en and login with the default root password welc0me...

WordPress Yuzo Related Posts plugin <=5.12.91 - Broken authentication

Broken authentication and session management allows unauthenticated call any action or update any option on WordPress Yuzo Related Posts plugin versions =5.12.91. Solution 10 April 2019 - this plugin was closed and is no longer available for download...

Liberapay: Broken Authentication and session management OWASP A2

Hello @liberapay, Description: It seems now if attacker has csrf token & victim cookies then attacker can easily login to victim account without any login details. No need Of Any Username/Password Theory Proof-Of-Concept: - Go to https://liberapay.com/admin.101/edit/username any username/Self...

DEBIAN-CVE-2018-16737

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation...

ALPINE-CVE-2018-16737

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation...

UBUNTU-CVE-2018-16737

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation...

CVE-2018-16738: Improper Authentication

tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1...

CVE-2018-16737

tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation...

CVE-2018-16738

tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1...

CVE-2018-16738

tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1...

U.S. Dept Of Defense: Broken Authentication

Summary: IDOR Description: It is possible to access other user account by changing the parameter 'email' to another valid e-mail, i managed to guess an existing user '███████@███.com' which discloses the ███ Name and Surname. Impact Information Disclosure Step-by-step Reproduction Instructions...

Weblate: Broken Authentication – Session Token bug

I found a broken authentitication vuln POC: 1- Create a https://demo.weblate.org/accounts/profile/ account 2- Confirm your email 3- Now request a password reset for your account. 4- Don’t use the password reset link that was sent to your email. 5- Login to your account, remember don’t use first t...

PT-2018-10267

Name of the Vulnerable Software and Affected Versions Cloud Foundry UAA versions 4.19 prior to 4.19.2 Cloud Foundry UAA versions 4.12 prior to 4.12.4 Cloud Foundry UAA versions 4.10 prior to 4.10.2 Cloud Foundry UAA versions 4.7 prior to 4.7.6 Cloud Foundry UAA versions 4.5 prior to 4.5.7...

TP-Link TL-WR841N V13 Insecure Direct Object Reference Vulnerability

Exploit for hardware platform in category web applications Vulnerability: Broken Authentication Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n Patched Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Overview An attacker that can send HTTP...

TP-Link TL-WR841N V13 Command Injection Vulnerability

Exploit for hardware platform in category web applications Vulnerability: Authenticated Blind Command Injection Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Overview The ping and traceroute functionalities allow for OS...

TP-Link TL-WR841N V13 Command Injection

Vulnerability: Authenticated Blind Command Injection Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Patched Version: None Risk: High Vendor Contacted: 05/20/2018 Vendor Fix: None Public Disclosure: 06/27/2018 Overview The ping and traceroute...

TP-Link TL-WR841N V13 Insecure Direct Object Reference

Vulnerability: Broken Authentication Affected Software: TP-Link TL-WR841N v13 Affected Version: 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n Patched Version: 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n Risk: High Vendor Contacted: 05/20/2018 Vendor Fix: Issue was independently fixed in previous...

CVE-2018-6960

VMware Horizon DaaS (7.x before 8.0.0) is affected by a broken authentication vulnerability that may allow bypass of two-factor authentication when an attacker has a legitimate Horizon DaaS account. The issue is addressed by VMware in VMSA-2018-0010; remediation is to apply the Horizon DaaS updat...

PT-2018-17840

Name of the Vulnerable Software and Affected Versions VMware Horizon DaaS versions 7.x before 8.0.0 Description The issue is related to a broken authentication mechanism that could allow an attacker to bypass two-factor authentication. To exploit this, an attacker must have a legitimate account o...