Lucene search
+L

7813 matches found

GithubExploit
GithubExploit
•added 2026/07/24 7:50 a.m.•69 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS8.9AI score0.98527EPSS
SaveExploits79
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/24 12:00 a.m.•10 views

CVE-2026-56163: Missing Authentication for Critical Function

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

10CVSS6AI score0.00901EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/24 12:00 a.m.•9 views

CVE-2026-61884: Missing Authentication for Critical Function

The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...

9.8CVSS5.9AI score0.00556EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•29 views

PT-2026-64313

Name of the Vulnerable Software and Affected Versions Microsoft Azure Kubernetes Service affected versions not specified Description Missing authentication for a critical function allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

10CVSS5.8AI score0.00901EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/07/23 9:31 p.m.•97 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744: Unauthenticated Remote Code Execution PoC...

9.8CVSS6.5AI score0.67516EPSS
SaveExploits45
GithubExploit
GithubExploit
•added 2026/07/23 3:42 p.m.•90 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS8.9AI score0.98527EPSS
SaveExploits80
Microsoft CVE
Microsoft CVE
•added 2026/07/23 2:00 p.m.•29 views

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

10CVSS6AI score0.00901EPSS
SaveExploits0
PyPA
PyPA
•added 2026/07/23 11:41 a.m.•62 views

PraisonAI: Jobs API exposes agent-execution endpoints with no authentication

praisonai: Jobs API exposes agent-execution endpoints with no authenticationResearcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Target: https://github.com/MervinPraison/PraisonAI---Package: praisonai on PyPIAffected version empirically tested:...

9.8CVSS6.6AI score0.00972EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2026/07/23 9:16 a.m.•29 views

CVE-2024-58330

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

7.5CVSS0.005EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/23 7:56 a.m.•20 views

CVE-2024-58330

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

7.5CVSS5.3AI score0.005EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/23 7:56 a.m.•35 views

EUVD-2024-55694

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

7.5CVSS5.3AI score0.005EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•41 views

PT-2026-63583

Name of the Vulnerable Software and Affected Versions Bosch IP cameras families CPP13 and CPP14 affected versions not specified Description A missing authentication check allows an unauthenticated attacker to retrieve video analytics event data. Recommendations At the moment, there is no...

7.5CVSS5.8AI score0.005EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•10 views

CVE-2026-64812: Missing Authentication for Critical Function

In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session...

10CVSS5.7AI score0.00483EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/07/22 12:32 p.m.•41 views

Missing Authentication for Critical Function

Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE /$restEndpoint/test-webhook/:id endpoint being registered before authentication middleware is applied. An attacker can disrupt active test...

6.9CVSS5.8AI score0.0059EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/22 12:00 a.m.•8 views

CVE-2026-65014: Missing Authentication for Critical Function

n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoint before authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow's active test webhook registration. The...

6.3CVSS5.9AI score0.0059EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/07/21 5:55 p.m.•29 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the shouldAcceptNewConnection process. An attacker can inject spoofed appcast item data by establishing unauthorized local connections to the registered Mach service after stage 1...

4.2CVSS5.8AI score0.00105EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•10 views

CVE-2026-61285: Missing Authentication for Critical Function

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

7.2CVSS5.7AI score0.00486EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•9 views

CVE-2026-60689: Missing Authentication for Critical Function

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud...

7.5CVSS5.7AI score0.00414EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•12 views

CVE-2026-60618: Missing Authentication for Critical Function

Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards component: Procurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...

8.8CVSS5.8AI score0.00432EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•8 views

CVE-2026-60616: Missing Authentication for Critical Function

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

6.5CVSS5.7AI score0.00282EPSS
SaveExploits0References3
Rows per page
Query Builder