Lucene search
K

87 matches found

GithubExploit
GithubExploit
added 2026/05/03 8:15 p.m.89 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940-POC cPanel/WHM Authentication Bypass Proof of...

9.8CVSS6AI score0.90543EPSS
Exploits62
RedhatCVE
RedhatCVE
added 2025/12/10 9:16 p.m.4 views

CVE-2021-47706

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass...

8.7CVSS6.6AI score0.00434EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 9:31 p.m.4 views

EUVD-2021-34733

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass...

8.7CVSS6AI score0.00434EPSS
Exploits0References6
NVD
NVD
added 2025/12/09 9:15 p.m.2 views

CVE-2021-47706

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass...

8.7CVSS0.00434EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/12/09 8:37 p.m.20 views

CVE-2021-47706 COMMAX Biometric Access Control System Authentication Bypass

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass...

8.7CVSS0.00434EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/09 8:37 p.m.2 views

CVE-2021-47706 COMMAX Biometric Access Control System Authentication Bypass

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass...

8.7CVSS6.2AI score0.00434EPSS
Exploits0References5
CVE
CVE
added 2025/12/09 8:37 p.m.7 views

CVE-2021-47706

The CVE-2021-47706 entry concerns COMMAX Biometric Access Control System 1.0.0, where an authentication bypass arises from cookie poisoning. The root cause is forged cookies that bypass authentication, enabling unauthenticated access to sensitive information and circumvention of physical controls...

8.7CVSS6.2AI score0.00434EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.3 views

COMMAX Biometric Access Control System 安全漏洞

COMMAX Biometric Access Control System is a biometric access control system from COMMAX Corporation in South Korea. A security vulnerability exists in COMMAX Biometric Access Control System version 1.0.0, which stems from a cookie poisoning issue that could lead to authentication bypass and...

8.7CVSS6.6AI score0.00434EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.3 views

PT-2025-50236

Name of the Vulnerable Software and Affected Versions COMMAX Biometric Access Control System version 1.0.0 Description The COMMAX Biometric Access Control System is affected by an authentication bypass. An unauthenticated attacker can exploit this to access sensitive information and bypass physic...

8.7CVSS6.1AI score0.00434EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-29078

Malware in sbrugna...

7.4CVSS6.1AI score0.05093EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-52593

Malicious code in bioql PyPI...

4.6CVSS5.1AI score0.00476EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-28322

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01134EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-40889

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01106EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-19782

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00549EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-30769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user. CVE-2022-30769 Note that Nessus...

4.6CVSS6.7AI score0.00476EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 11:18 p.m.3 views

CVE-2022-38297

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning...

9.8CVSS7.2AI score0.01106EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:50 p.m.7 views

CVE-2022-30769

Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user...

4.6CVSS6.7AI score0.00476EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:49 p.m.2 views

CVE-2024-22186

The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his privileges by poisoning the cookie to become administrator...

8.8CVSS7.3AI score0.00549EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.28 views

Fortinet FortiWeb SQL注入漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. A SQL injection vulnerability exists in...

2.7CVSS5.2AI score0.00392EPSS
Exploits0References3
Veracode
Veracode
added 2024/12/18 5:28 a.m.19 views

Cookie Poisoning

Quarkus-HTTP is vulnerable to Cookie Poisoning. The vulnerability is due to improper parsing of cookies with specific value-delimiting characters, allowing attackers to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values...

7.4CVSS6.8AI score0.00753EPSS
Exploits0References10Affected Software1
Rows per page
Query Builder