8878 matches found
Improper Authentication
Ratify is vulnerable to Improper Authentication. The vulnerability is due to insufficient registry validation due to the Azure authentication providers failing to verify that the target registry is an Azure Container Registry ACR before exchanging an Entra ID EID token, potentially exposing token...
CVE-2025-2395
The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator...
CVE-2025-2395
The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator...
CVE-2025-2395 e-Excellence U-Office Force - Improper Authentication
The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator...
CVE-2025-2395 e-Excellence U-Office Force - Improper Authentication
The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator...
CVE-2025-2395
The CVE-2025-2395 issue concerns the U-Office Force product from e-Excellence, described as an Improper Authentication vulnerability that allows unauthenticated remote attackers to use a specific API and modify cookies to log in as an administrator. The provided sources (NVD/Red Hat/CVE records) ...
PT-2025-11533
Name of the Vulnerable Software and Affected Versions Keytop 路内停车收费系统 version 2.7.1 Description A critical issue has been identified, affecting an unknown functionality of the file /saas/commonApi/park/getParks of the component API. This leads to improper authentication. The issue can be exploite...
e-Excellence U-Office Force security vulnerabilities
e-Excellence U-Office Force is an e-Office platform from China-based First Class Technology e-Excellence. A security vulnerability exists in e-Excellence U-Office Force that stems from improper authentication, which could result in an unauthenticated remote attacker logging in as an administrator...
Keytop on-street parking payment system authorization issue vulnerability
Keytop On-street parking payment system is a parking payment system from Keytop. An authorization issue vulnerability exists in the Keytop On-street parking payment system version 2.7.1, which arises from improper authentication...
CVE-2025-2395: Reliance on Cookies without Validation and Integrity Checking
The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator...
CVE-2025-2388: Improper Authentication
A vulnerability was found in Keytop 路内停车收费系统 2.7.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /saas/commonApi/park/getParks of the component API. The manipulation leads to improper authentication. The attack can be launched remotely...
PT-2025-11459
Name of the Vulnerable Software and Affected Versions U-Office Force from e-Excellence affected versions not specified Description The issue allows unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator. This is due to an Improper Authentication...
CVE-2025-2339
A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public an...
CVE-2025-2339 otale Tale Blog logs improper authentication
A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public an...
CVE-2025-2339
Summary of CVE-2025-2339 (otale Tale Blog 2.0.5): A vulnerability involving improper authentication was reported in Tale Blog 2.0.5. The issue affects an unknown part of the file /%61dmin/api/logs. It can be exploited remotely, and public exploitation is noted in the sources. The vulnerability is...
CVE-2025-2339 otale Tale Blog logs improper authentication
A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public an...
CVE-2025-2339: Improper Authentication
A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public an...
PT-2025-11388
Name of the Vulnerable Software and Affected Versions otale Tale Blog version 2.0.5 Description A problem was found in otale Tale Blog. This issue affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack...
Tale Blog Authorization Issue Vulnerability
Tale Blog is a Java blog open-sourced by Tale Blog System. An authorization issue vulnerability exists in Tale Blog version 2.0.5, which stems from improper authentication and could lead to remote attacks...
