43 matches found
CVE-2019-13496
CVE-2019-13496 漏洞利用标题：OTP绕过（文件完整性检查缺失） 日期：2019年10月7日 漏洞利用作者：Furqan Khan 厂商主页：https://www.oneidentity.com/ 软件链接：https://www.oneidentity.com/products/cloud-access-manager/ 版本：8.1.3 测试环境：Kali Linux, Windows 7, Ubuntu 16.04 要利用OTP绕过漏洞，攻击者需借助先前发现的MITM/SSL-Strip漏洞 CVE-2019-13498 ， CVE-2019-13498...
CVE-2026-7458
🧨 CVE-2026-7458 – Bypass de OTP en PickPlugins User Verification Omisión de autenticación sin autenticación previa mediante comparación débil en la API REST de verificación OTP PickPlugins User Verification ≤ 2.0.46 📖 Descripción El plugin User Verification de PickPlugins para WordPress versiones...
CVE-2026-11387
CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Escalada de Privilegios no Autenticada mediante Restablecimiento de Contraseña Arbitraria ☆ === Beelze === 📋 Información de la Vulnerabilidad Campo| Detalles ---|--- CVE ID| CVE-2026-11387 CVSS Score| 9.8 Critical CVSS Vector|...
CVE-2026-8285 OTP Bypass in Universal Sotware's FlexCity
Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 before 5.542.0...
CVE-2026-6853 OTP Bypass in Başbelen Group's Pause+ Mobile App
Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd. Co. Pause+ Mobile App allows Authentication Bypass. This issue affects Pause+ Mobile App: from v1.0.6 before v1.5...
Exploit for CVE-2026-7458
🧨 CVE-2026-7458 – PickPlugins User Verification OTP Bypass Un...
CVE-2026-10611
CVE-2026-10611 describes an authentication bypass in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deployments with LdapAuth.mixedAuth=true and Security.require_otp=true, users authenticated via an authentication plugin (e.g., LDAP) may have their session established dur...
CVE-2026-1816 OTP Bypass in TEİAŞ's Mobile Application
Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation TEİAŞ Mobile Application allows Brute Force. This issue affects Mobile Application: from 1.6.2 before 1.13...
CVE-2025-13477 OTP Bypass in Digital Operation Services' WifiBurada
Exposure of private personal information to an unauthorized actor, Insufficiently Protected Credentials vulnerability in Digital Operations Services Inc. WifiBurada allows Authentication Bypass. This issue affects WifiBurada: through 21052026. NOTE: The vendor was contacted early about this...
CVE-2026-26227 VLC for Android < 3.7.0 Remote Access OTP Authentication Bypass
VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature due to missing or insufficient rate limiting on one-time password OTP verification. The Remote Access Server uses a 4-digit OTP and does not enforce effective throttling or lockou...
EUVD-2019-4957
Malware in sbrugna...
EUVD-2019-16762
Malware in sbrugna...
EUVD-2025-26603
Malicious code in bioql PyPI...
CVE-2025-2411
CVE-2025-2411 describes an improper restriction of excessive authentication attempts in Akinsoft TaskPano that allows authentication bypass. Affected: TaskPano releases s1.06.04 up to before v1.06.06 (i.e., from s1.06.04 through before 1.06.06). Root cause: insufficient controls on authentication...
CVE-2025-2411 OTP Bypass in Akinsoft's TaskPano
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypass. This issue affects TaskPano: from s1.06.04 before v1.06.06...
CVE-2025-2416 OTP Bypass in Akinsoft's LimonDesk
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypass. This issue affects LimonDesk: from s1.02.14 before v1.02.17...
CVE-2025-2415 OTP Bypass in Akinsoft's MyRezzta
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass. This issue affects MyRezzta: from s2.03.01 before v2.05.01...
CVE-2025-8342
CVE-2025-8342 concerns the WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress. Affected versions up to 1.8.47 allow unauthenticated attackers to bypass OTP verification via faulty empty-value checks in lwp_ajax_register and exploit Firebase API error handling when the ...
