cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability Overview CVE-2024-49039 is a Windows Task Scheduler Elevation of Privilege EoP vulnerability that allows an authenticated attacker to escape the AppContainer sandbox, elevating from Low integrity AppContainer to Medium...

CVE-2026-84148

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...

EUVD-2026-69057

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...

patch-CVE-2026-05890

Patch: CVE-2026-05890 Vulnerability Details CVE : CVE-2026-05890 Product : Juniper Junos Description : Improper authentication Severity : High Patch Status: DEPLOYED...

CVE-2017-7921

CVE-2017-7921 CVE-2017-7921 es una vulnerabilidad crítica puntuación CVSS: 9.8 que afecta a múltiples modelos de cámaras IP y DVR de Hikvision, divulgada por primera vez en 2017. Se origina por un fallo de autenticación inadecuada que permite a atacantes remotos no autenticados eludir los...

PT-2026-84285

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

pocketbase-CVE-2026-44166

CVE-2026-44166: Pre-secuestro de cuentas OAuth2 en PocketBase Una colección de autenticación de PocketBase con OAuth2 habilitado permite al cliente pasar un objeto createData al registrarse. El correo electrónico dentro de createData nunca se verifica contra el correo electrónico que el proveedor...

CVE-2026-68569

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

CVE-2021-26088

PoC for CVE-2021-26088 written in PowerShell Description An improper authentication vulnerability in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2025-22968

CVE-2025-22968 D-Link DWR-M972V Software Version 1.05SSG Unauthenticated Access Vulnerability Description Unauthenticated access in the default configuration of the D-Link DWR-M972V Software Version 1.05SSG allows an anonymous attacker to access the router and upload malicious backdoor scripts vi...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Vulnerabilidad de Autenticación Inadecuada en la Serie de Cámaras Hikvision Una falla de seguridad identificada como CVE-2017-7921 que afecta a varios modelos de cámaras Hikvision. La vulnerabilidad fue descubierta en los dispositivos de las series DS-2CD2xx2F-I V5.2.0 build 14072...

BIT-TOMCAT-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, fr...

CVE-2017-7921-Writeup-2026

CVE-2017-7921 — Hikvision IP Camera / DVR / NVR Improper Authentication — Privilege Escalation via Crafted Query Parameter | ---|--- CVE ID| CVE-2017-7921 Vulnerability Class| CWE-287: Improper Authentication CVSS v3.0 Base Score| 10.0 Critical — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS v2.0 Scor...

Linux Distros Unpatched Vulnerability : CVE-2026-15576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in the agent receiver of Checkmk 2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification...

CVE-2017-7921-EXP

CVE-2017-7921 漏洞利用 在海康威视 设备中发现了一个不正确的身份验证问题。 ​ 不正确的身份验证漏洞发生在应用程序未能充分或正确地验证用户身份时。 ​ 这可能导致恶意用户提升其在系统上的权限并获取敏感信息。 ​ https://seclists.org/fulldisclosure/2017/Sep/23 ​ 漏洞详细信息： ​ ---------------------- ​ 获取所有用户及其角色列表： ​ http://camera.ip/Security/users?auth=YWRtaW46MTEK ​ 无需身份验证即可获取摄像机快照： ​...

CVE-2026-82547

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amffsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has...

EUVD-2026-68245

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amffsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has...

CVE-2026-82547

Linux Foundation Magma 1.9.0 contains an improper authentication vulnerability in the Registration Complete Message Handler (file tasks/amf/amf_fsm.cpp, unknown function). A remote attacker with no prior privileges and no user interaction can manipulate the handler to bypass authentication, resul...

CVE-2026-82547 Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amffsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has...

CVE-2024-10511

CVE-2024-10511 CWE-287: Autenticazione impropria Sommario Il prodotto Schneider Electric PowerChute Serial Shutdown è un software di gestione UPS che consente lo spegnimento ordinato del sistema e funzionalità di gestione dell'energia per desktop, server e workstation. PowerChute Serial Shutdown...