CVE-2025-30361 WeGIA Vulnerable to Broken Authentication - Old Password Validation

WeGIA is a Web manager for charitable institutions. A security vulnerability was identified in versions prior to 3.2.6, where it is possible to change a user's password without verifying the old password. This issue exists in the control.php endpoint and allows unauthorized attackers to bypass...

CVE-2025-26658 Broken Authentication in SAP Business One (Service Layer)

The Service Layer in SAP Business One, allows attackers to potentially gain unauthorized access and impersonate other users in the application to perform unauthorized actions. Due to the improper session management, the attackers can elevate themselves to higher privilege and can read, modify...

CVE-2024-5174

A flaw in Gliffy results in broken authentication through the reset functionality of the application...

CVE-2024-5174

A flaw in Gliffy results in broken authentication through the reset functionality of the application...

CVE-2024-5174

CVE-2024-5174 affects Perforce Gliffy and describes a flaw in the reset functionality that results in broken authentication. The available connected data identifies Gliffy as the affected software and the underlying issue as an authentication problem during reset, but does not provide concrete de...

CVE-2024-5174 Broken Authentication in Gliffy

A flaw in Gliffy results in broken authentication through the reset functionality of the application...

CVE-2024-5174 Broken Authentication in Gliffy

A flaw in Gliffy results in broken authentication through the reset functionality of the application...

CVE-2024-5174: Improper Authentication

A flaw in Gliffy results in broken authentication through the reset functionality of the application...

Perforce Gliffy 安全漏洞

Perforce Gliffy is a Perforce software for charting via HTML5 cloud-based applications. A security vulnerability exists in Perforce Gliffy that stems from an authentication flaw in the application reset feature that results in broken authentication...

PT-2025-7712 · Gliffy · Gliffy

Name of the Vulnerable Software and Affected Versions: Gliffy affected versions not specified Description: A flaw in the application results in broken authentication through the reset functionality. Recommendations: At the moment, there is no information about a newer version that contains a fix...

mySCADA myPRO Manager Credential Harvester (CVE-2025-24865 and CVE-2025-22896)

Credential Harvester in MyPRO Manager use auxiliary/admin/scada/mypro/mgrcreds msf undefinedmgrcreds show actions ...actions... msf undefinedmgrcreds set ACTION msf undefinedmgrcreds show options ...show and set options... msf undefinedmgrcreds run class MetasploitModule 'mySCADA myPRO Manager...

GHSA-37WC-H8XC-5HC4 Hickory DNS's DNSSEC validation may accept broken authentication chains

Summary The DNSSEC validation routines treat entire RRsets of DNSKEY records as trusted once they have established trust in only one of the DNSKEYs. As a result, if a zone includes a DNSKEY with a public key that matches a configured trust anchor, all keys in that zone will be trusted to...

CVE-2025-24643 WordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerability

Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPGuppy: from n/a through = 1.1.0...

CVE-2025-24643

CVE-2025-24643 is a Missing Authorization vulnerability in the WordPress WPGuppy plugin (Amento Tech Pvt Ltd) affecting WPGuppy versions up to 1.1.0. Root cause: insufficient access control on WPGuppy features (e.g., One-to-one chat). Impact: unauthorized actions due to broken authorization. Reme...

CVE-2025-24643 WordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerability

Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPGuppy: from n/a through = 1.1.0...

CVE-2025-22773 WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...

CVE-2025-22773

CVE-2025-22773 pertains to the WPChill Htaccess File Editor and describes an Insertion of Sensitive Information into an Externally-Accessible File or Directory vulnerability caused by incorrectly configured access controls. The issue affects Htaccess File Editor from version n/a up to 1.0.19. The...

CVE-2025-22773 WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Chill Htaccess File Editor htaccess-file-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through = 1.0.19...

WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Htaccess File Editor versions = 1.0.19...

CVE-2024-42172

HCL MyXalytics is affected by broken authentication. It allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and system control. This vulnerability arises from poor configuration, logic errors, or software bugs and can affect any application wi...