Lucene search
+L

1153 matches found

GithubExploit
GithubExploit
•added 2026/04/15 11:54 a.m.•223 views

Exploit for Missing Authentication for Critical Function in Flowiseai Flowise

Flowise-CVE-2025-58434-PasswordReset Unauthenticated...

9.8CVSS6.9AI score0.49894EPSS
SaveExploits15
BDU FSTEC
BDU FSTEC
•added 2026/04/15 12:00 a.m.•18 views

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS5.8AI score0.00298EPSS
SaveExploits0References2Affected Software22
CVE
CVE
•added 2026/04/14 3:38 p.m.•129 views

CVE-2025-53847

CVE-2025-53847 affects Fortinet FortiOS/FortiGate: missing authentication for a critical function allows an attacker to execute unauthorized code or commands via specially crafted packets. Impact spans FortiOS versions 6.2.x (6.2.9–6.2.17), 6.4.x (all versions), 7.0.x (7.0.0–7.0.17), 7.2.x (7.2.0...

8.8CVSS6.9AI score0.00283EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/14 3:38 p.m.•5 views

CVE-2025-53847

A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiOS 6.2.9 through 6.2.17 allows attacker to execute unauthorized code or...

6.5CVSS6.9AI score0.00283EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:00 p.m.•17 views

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00298EPSS
SaveExploits0
Snyk
Snyk
•added 2026/04/14 12:04 a.m.•10 views

Missing Authentication for Critical Function

Overview github.com/minio/minio/cmd is an open source object storage server compatible with Amazon S3 APIs. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the PutObjectExtractHandler, PutObjectHandler, and PutObjectPartHandler function. An...

8.8CVSS7.9AI score0.00715EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•15 views

PT-2026-32737

CVE-2026-26159 Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. https://t.co/5uioiAiy6m...

7.8CVSS6.2AI score0.00298EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•21 views

The vulnerability of the Maltrail malware detection system lies in the lack of authentication for the critical function, allowing the attacker to execute arbitrary code.

The vulnerability of the Maltrail malware detection system lies in the lack of authentication for the critical function when processing the username parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...

10CVSS7.3AI score0.05472EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/13 7:23 p.m.•19 views

CVE-2026-33788

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges...

8.5CVSS5.9AI score0.00167EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/04/13 12:00 a.m.•20 views

The vulnerability of the software interface of the tool for creating and deploying agents and working processes in Langflow allows a perpetrator to execute arbitrary code.

The vulnerability of the software interface of the tool for creating and deploying agents and processes of Langflow is related to the absence of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.4CVSS7.4AI score0.33289EPSS
SaveExploits2References2Affected Software1
Veracode
Veracode
•added 2026/04/11 5:35 a.m.•32 views

Missing Authentication For Critical Function

marimo is vulnerable to Missing Authentication For Critical Function. The vulnerability is due to missing authentication validation in the /terminal/ws WebSocket endpoint, which allows an attacker to establish a shell and execute arbitrary system commands without authentication...

9.8CVSS8.1AI score0.37865EPSS
SaveExploits27References6Affected Software1
Snyk
Snyk
•added 2026/04/10 10:07 p.m.•8 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

6.3CVSS7.8AI score0.00665EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/10 10:07 p.m.•10 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

6.3CVSS7.8AI score0.00665EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/10 10:07 p.m.•6 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

6.3CVSS7.8AI score0.00665EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/10 12:30 a.m.•19 views

EUVD-2026-21093

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges...

8.5CVSS5.9AI score0.00167EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/09 8:04 p.m.•40 views

CVE-2026-4436 GPL Odorizers GPL750 Missing Authentication for Critical Function

A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas line...

8.6CVSS0.00549EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/08 7:24 p.m.•28 views

CVE-2025-30650

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line cards includ...

8.4CVSS0.00137EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/08 7:15 p.m.•5 views

Missing Authentication for Critical Function

Overview ci4-cms-erp/ci4ms is a composer create-project ci4-cms-erp/ci4ms Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the install route guard process when the database is temporarily unreachable and the cache is empty. An attacker can gain...

9.2CVSS5.8AI score0.00405EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/04/08 5:26 p.m.•9 views

CVE-2025-30650

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line cards includ...

8.4CVSS5.8AI score0.00137EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/04/08 5:26 p.m.•32 views

EUVD-2025-209320

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to line cards running Junos OS Evolved as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line...

8.4CVSS5.9AI score0.00137EPSS
SaveExploits0References3
Rows per page
Query Builder