4132 matches found
CVE-2025-4978 Netgear DGND3700 Basic Authentication BRS_top.html improper authentication
A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.151.00.15NA. This affects an unknown part of the file /BRStop.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...
CVE-2025-4978
Netgear DGND3700 is affected (version 1.1.00.15_1.00.15NA); vulnerability in Basic Authentication’s BRS_top.html allows remote authentication bypass. Several sources describe this as a very critical issue with remote exploit exposure. The exact root cause inside BRS_top.html is not fully detailed...
CVE-2025-4978 Netgear DGND3700 Basic Authentication BRS_top.html improper authentication
A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.151.00.15NA. This affects an unknown part of the file /BRStop.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...
NETGEAR DGND3700 安全漏洞
The Netgear DGND3700 is a dual-band Gigabit wireless DSL router manufactured by NETGEAR and is primarily used for home and SMB network connections. The Netgear DGND3700 suffers from an improper authentication vulnerability that originates in an unknown portion of Basic Authentication's file...
PT-2025-22135 · NetGear · Netgear Dgnd3700
Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A very critical issue was found, affecting the Basic Authentication component of the Netgear DGND3700. This issue leads to improper authentication and can be initiated remotely. The...
CVE-2025-4755
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-4755
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-4755 D-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authentication
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-4755
CVE-2025-4755 affects D-Link DI-7003GV2 (Firmware 24.04.18D1 R(68125)). The vulnerability is in the function sub_497DE4 in the file /H5/netconfig.asp , leading to improper authentication . Exploitation can be performed remotely and public disclosures exist. A PT-Security advisory recommends a tem...
CVE-2025-4755 D-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authentication
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...
PT-2025-21621 · D Link · D-Link Di-7003Gv2
Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 version 24.04.18D1 R68125 Description: A critical issue has been found, affecting the function sub 497DE4 of the file /H5/netconfig.asp. This leads to improper authentication. The attack can be initiated remotely...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication due to the CookieStore configuration. An attacker can gain unauthorized access by brute-forcing the authentication tags of the session cookies. Note: This is only exploitable if the user has configured the sessio...
CVE-2025-20083
Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication due to the improper validation of authentication claims from the WSO2 realm. An attacker can gain unauthorized access and impersonate any user by submitting any username and password combination, even for account...
CVE-2025-3659
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...
Alibaba Cloud Linux 3 : 0156: 389-ds:1.4 (ALINUX3-SA-2022:0156)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0156 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-0918: A vulnerability was...
CVE-2025-20083
Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20083
Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20083
CVE-2025-20083 affects Intel® Slim Bootloader. Description: improper authentication in the firmware may allow a privileged user to escalate privileges via local access. References indicate Intel issued an advisory (INTEL-SA-01290) with mitigation guidance and affected platforms; CVSS scores shown...