Lucene search
+L

4428 matches found

Cvelist
Cvelist
added 2026/09/01 2:45 p.m.29 views

CVE-2026-84114 Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

6.5CVSS0.00342EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/01 1:26 p.m.3 views

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Vulnerabilidad de elevación de privilegios en el Programador de tareas de Windows Descripción general CVE-2024-49039 es una vulnerabilidad de elevación de privilegios EoP en el Programador de tareas de Windows que permite a un atacante autenticado escapar de la sandbox AppContaine...

8.8CVSS7.3AI score0.14179EPSS
SaveExploits2
NVD
NVD
added 2026/09/01 1:20 p.m.11 views

CVE-2026-84148

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...

9.2CVSS0.0039EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 12:38 p.m.7 views

EUVD-2026-69057

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...

9.2CVSS6AI score0.0039EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 8:08 a.m.5 views

patch-CVE-2026-05890

Parche: CVE-2026-05890 Detalles de la vulnerabilidad CVE : CVE-2026-05890 Producto : Juniper Junos Descripción : Autenticación incorrecta Severidad : Alta Estado del Parche: DESPLEGADO...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 3:32 a.m.2 views

CVE-2017-7921

CVE-2017-7921 CVE-2017-7921 es una vulnerabilidad crítica puntuación CVSS: 9.8 que afecta a múltiples modelos de cámaras IP y DVR de Hikvision, divulgada por primera vez en 2017. Se origina por un fallo de autenticación inadecuada que permite a atacantes remotos no autenticados eludir los...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits13
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.10 views

PT-2026-84285

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

6.5CVSS6.1AI score0.00342EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/31 8:11 p.m.2 views

pocketbase-CVE-2026-44166

CVE-2026-44166: Pre-secuestro de cuentas OAuth2 en PocketBase Una colección de autenticación de PocketBase con OAuth2 habilitado permite al cliente pasar un objeto createData al registrarse. El correo electrónico dentro de createData nunca se verifica contra el correo electrónico que el proveedor...

7.6CVSS6.1AI score0.00247EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/08/31 6:24 p.m.5 views

CVE-2026-68569

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

8.2CVSS5.8AI score0.00525EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/31 3:26 p.m.7 views

CVE-2021-26088

PoC para CVE-2021-26084 escrito en PowerShell Descripción Una vulnerabilidad de autenticación inadecuada en FSSO Collector puede permitir que un usuario no autenticado eluda cualquier regla de autenticación del firewall y acceda a la red protegida mediante el envío de paquetes UDP de notificación...

9.8CVSS7.2AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/08/31 2:42 p.m.3 views

CVE-2025-22968

CVE-2025-22968 D-Link DWR-M972V Software Version 1.05SSG Unauthenticated Access Vulnerability Description Unauthenticated access in the default configuration of the D-Link DWR-M972V Software Version 1.05SSG allows an anonymous attacker to access the router and upload malicious backdoor scripts vi...

9.8CVSS7.2AI score0.02497EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 12:18 p.m.4 views

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Vulnerabilidad de Autenticación Inadecuada en la Serie de Cámaras Hikvision Una falla de seguridad identificada como CVE-2017-7921 que afecta a varios modelos de cámaras Hikvision. La vulnerabilidad fue descubierta en los dispositivos de las series DS-2CD2xx2F-I V5.2.0 build 14072...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits13
OSV
OSV
added 2026/08/31 8:39 a.m.9 views

BIT-TOMCAT-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, fr...

8.1CVSS5.8AI score0.00525EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 2:36 a.m.3 views

CVE-2017-7921-Writeup-2026

CVE-2017-7921 — Hikvision IP Camera / DVR / NVR Improper Authentication — Privilege Escalation via Crafted Query Parameter | ---|--- CVE ID| CVE-2017-7921 Vulnerability Class| CWE-287: Improper Authentication CVSS v3.0 Base Score| 10.0 Critical — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS v2.0 Scor...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits13References3
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-15576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in the agent receiver of Checkmk 2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification...

6.9CVSS5.9AI score0.00269EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/30 8:45 p.m.2 views

CVE-2017-7921-EXP

Exploit de CVE-2017-7921 Se descubrió un problema de autenticación inadecuada en dispositivos Hikvision. ​ La vulnerabilidad de autenticación inadecuada ocurre cuando una aplicación no autentica a los usuarios de manera adecuada o correcta. ​ Esto puede permitir que un usuario malintencionado...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits13
NVD
NVD
added 2026/08/30 3:16 p.m.9 views

CVE-2026-82547

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amffsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has...

6.9CVSS0.00439EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/30 2:45 p.m.11 views

EUVD-2026-68245

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amffsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has...

6.9CVSS6.3AI score0.00439EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/30 2:45 p.m.16 views

CVE-2026-82547

Linux Foundation Magma 1.9.0 contains an improper authentication vulnerability in the Registration Complete Message Handler (file tasks/amf/amf_fsm.cpp, unknown function). A remote attacker with no prior privileges and no user interaction can manipulate the handler to bypass authentication, resul...

6.9CVSS6.3AI score0.00439EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/30 2:45 p.m.7 views

CVE-2026-82547 Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amffsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has...

6.9CVSS5.5AI score
SaveExploits0References8
Rows per page
Query Builder