96 matches found
Control iD iDSecure - Authentication Bypass
An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative use...
CVE-2023-6329
CVE-2023-6329 — Control iD iDSecure 인증 우회 CVE-2023-6329 에 대한 Python 개념 증명 익스플로잇으로, Control iD iDSecure 4.7.43.0 이하 버전에서 발견된 부적절한 접근 제어 취약점입니다. 이 결함은 인증되지 않은 원격 공격자가 공개적으로 접근 가능한 값장치 일련번호, 서버에서 제공하는 nonce, 하드코딩된 솔트만을 사용하는 예측 가능한 비밀번호 유도 알고리즘을 악용하여 유효한 로그인 자격 증명을 재구성할 수 있게 합니다. 인증에 성공하면 공격자는 웹...
CVE-2026-92626
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception. The exception is thrown from an...
CVE-2026-92625
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and relaunches it by way of a generated bat...
CVE-2026-92626
Control iD iDSecure versions prior to 4.8.3.0 are vulnerable to an unauthenticated Denial of Service (CVSS 7.5 HIGH). The root cause lies in the /api/dguardintegration/dguardVersion endpoint, which dereferences a DGuard integration login state that may be unset, raising an unhandled null referenc...
CVE-2026-92626 Control iD iDSecure Unauthenticated Denial of Service
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception. The exception is thrown from an...
EUVD-2026-80804
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception. The exception is thrown from an...
EUVD-2026-80803
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and relaunches it by way of a generated bat...
CVE-2026-92625
Control iD iDSecure versions prior to 4.8.3.0 are vulnerable to an unauthenticated Denial of Service via the /api/license/restartService endpoint. This endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and relaunches it via a...
CVE-2026-92625 Control iD iDSecure Unauthenticated Denial of Service
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and relaunches it by way of a generated bat...
Exploit for Improper Authentication in Controlid Idsecure
CVE-2023-6329 — Control iD iDSecure Authentication Bypass !P...
VulnCheck KEV: CVE-2023-6329
An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative use...
EUVD-2025-19061
Malicious code in bioql PyPI...
EUVD-2025-19062
Malicious code in bioql PyPI...
EUVD-2025-19063
Malicious code in bioql PyPI...
EUVD-2023-33570
Malicious code in bioql PyPI...
EUVD-2023-37530
Malicious code in bioql PyPI...
EUVD-2023-37533
Malicious code in bioql PyPI...
EUVD-2023-37532
Malicious code in bioql PyPI...
CVE-2025-49853
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries...