17 matches found
CVE-2026-108568 InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity
A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billing/actions/paypal.php of the component Billing Module. Executing a manipulation of the argument bid/sig can lead to insufficient...
Netty Insufficient Data Authenticity Code Execution
The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2026-26950
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
PT-2026-94126
Уязвимость реализации технологий конфиденциальных вычислений Intel TDX, Intel Scalable SGX и AMD SEV-SNP микропрограммного обеспечения процессоров Intel и AMD связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...
CVE-2026-11836
The CVE concerns Caliptra Core ROM and Core Firmware in subsystem mode, where validate_debug_unlock_token() fails to bind the token to a specific device. An attacker with access to the integrator’s debug unlock signing service can unlock production debug on an unintended device by presenting a va...
TRENDnet TEW-821DAP: Data Forgery Vulnerability
TRENDnet TEW-821DAP is a wireless access point from the company TRENDnet. The version TRENDnet TEW-821DAP 1.12B01 has a vulnerability related to data falsification. This vulnerability stems from improper handling of the parameter dest in the findHWid/newGuiUpdateFirmware function within the...
CVE-2026-2385
The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 6.4.7. This is due to the plugin decrypting and trusting...
Jitsi Meet Electron Code Execution
The vulnerability of the Jitsi Meet Electron software lies in the insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
F5 Networks BIG-IP : IPMI vulnerability (K000156992)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000156992 advisory. AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.CVE-2023-28863 Tenable has...
CVE-2025-8978 D-Link DIR-619L boa FirmwareUpgrade data authenticity
A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...
CVE-2025-5833
Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...
CVE-2025-1108 Insufficient data authenticity vulnerability in Janto
Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request by injecting malicious content into...
PT-2024-9226 · 2N · 2N Access Commander
Name of the Vulnerable Software and Affected Versions: 2N Access Commander versions 3.1.1.2 and prior Description: The issue is related to an Insufficient Verification of Data Authenticity, which could allow an attacker to escalate their privileges and gain root access to the system. This...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831-winrar-expoit-simple-Poc Very important I h...
CVE-2023-27982
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code...
Remote code execution
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code...
CVE-2022-22567
Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware...