Lucene search
+L

8792 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2022-22576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly...

8.1CVSS6.7AI score0.02523EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•12 views

CVE-2025-52395: Improper Authentication

An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password reset API endpoint that fails to validate the identity of the requester properly...

9.8CVSS6.6AI score0.00561EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/21 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2023-26150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and...

7.5CVSS7AI score0.00524EPSS
SaveExploits1References2
CNVD
CNVD
•added 2025/08/20 12:00 a.m.•19 views

Hostel Management System hostel_manage.exe file improper authentication vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from an improper authentication vulnerability that originates from a misbehavior of the file hostelmanage.exe that results in improper authentication, no details of the vulnerability are available at this tim...

7.8CVSS7.1AI score0.00277EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/18 12:00 a.m.•10 views

CVE-2025-55293: Improper Authentication

Meshtastic is an open source mesh networking solution. Prior to v2.6.3, an attacker can send NodeInfo with a empty publicKey first, then overwrite it with a new key. First sending a empty key bypasses 'if p.publickey.size 0 ', clearing the existing publicKey and resetting the size to 0 for a know...

9.8CVSS5.9AI score0.00438EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/08/16 12:00 a.m.•14 views

VulnCheck KEV: CVE-2023-45038

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later...

8.8CVSS5.8AI score0.01243EPSS
SaveIn wildExploits0References127
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•165 views

WordPress Eventin plugin elevation of privilege vulnerability

WordPress Eventin plugin is an event management plugin designed for WordPress that supports event creation, registration, ticketing and calendar synchronization for offline, online and mixed event management. An elevation of privilege vulnerability exists in WordPress Eventin plugin, which stems...

8.8CVSS7.1AI score0.00617EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/08/14 6:23 p.m.•11 views

CVE-2025-53778

Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.3AI score0.51467EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/14 6:23 p.m.•9 views

CVE-2025-53793

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

7.5CVSS7AI score0.01346EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/14 3:15 p.m.•20 views

CVE-2025-8964

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

7.8CVSS5.2AI score0.00277EPSS
SaveExploits1References7
NVD
NVD
•added 2025/08/14 3:15 p.m.•18 views

CVE-2025-8964

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

7.8CVSS0.00277EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/08/14 3:02 p.m.•12 views

CVE-2025-8964 code-projects Hostel Management System Login hostel_manage.exe improper authentication

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

5.3CVSS7AI score0.00277EPSS
SaveExploits1References6
CVE
CVE
•added 2025/08/14 3:02 p.m.•46 views

CVE-2025-8964

CVE-2025-8964 affects code-projects’ Hostel Management System 1.0, specifically the Login component via the hostel_manage.exe file. The vulnerability is described as improper authentication, enabling a local-host attack. The PT-2025-33299 entry confirms the issue and states the exploit has been p...

7.8CVSS7AI score0.00277EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2025/08/14 3:02 p.m.•33 views

CVE-2025-8964 code-projects Hostel Management System Login hostel_manage.exe improper authentication

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

5.3CVSS0.00277EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•14 views

Code-Projects Hostel Management System 安全漏洞

Hostel Management System is a hostel management system. Hostel Management System suffers from an improper authentication vulnerability that originates from a misbehavior of the file hostelmanage.exe that results in improper authentication, no details of the vulnerability are available at this tim...

7.8CVSS7AI score0.00277EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•6 views

CVE-2025-8964: Improper Authentication

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

7.8CVSS5.3AI score0.00277EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/08/14 12:00 a.m.•30 views

PT-2025-33299 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hostel Management System version 1.0 Description: A vulnerability exists in the Login component of Hostel Management System 1.0, specifically within the hostel manage.exe file. This issue results in improper authentication and allows for loca...

7.8CVSS5.1AI score0.00277EPSS
SaveExploits1References11
osv-ghsa
osv-ghsa
•added 2025/08/13 3:30 p.m.•59 views

GHSA-VQ9X-W82R-RHMC Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

8.7CVSS7.1AI score0.00896EPSS
SaveExploits3References5
NVD
NVD
•added 2025/08/13 2:15 p.m.•34 views

CVE-2025-52392

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

5.4CVSS0.00896EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•7 views

CVE-2025-51451: Improper Authentication

In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm...

9.8CVSS5.8AI score0.00384EPSS
SaveExploits0References3
Rows per page
Query Builder