1499 matches found
CVE-2021-37604
In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by...
CVE-2021-44031
An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/GUID/filename...
CVE-2019-19245
NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginFormusername field when double quotes are used...
CVE-2019-17186
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
CVE-2019-1003019
An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...
CVE-2019-17187
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...
PT-2025-20325 · Undefined · Undefined
⚠️ Vulnerability Alert: SysAid On-Premise Pre-Auth RCE Chain 4 Critical Flaws 📅 Timeline: Disclosure: 2025-05-07, Patch: 2025-03-01 🆔 CVE ID: CVE-2025-2778 📊 Base Score: 9.8 assessed Critical 📏 CVSS Metrics: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cvssSeverity:...
📄 Erlang-Based SSH OTP Pre-Authentication Remote Code Execution
This Metasploit module detect and exploits CVE-2025-32433, a pre-authentication vulnerability in Erlang-based SSH servers that allows remote command execution. By sending crafted SSH packets, it executes a payload to establish a reverse shell on the target system. The exploit leverages a flaw in...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433Erlang-OTP This script is a custom security too...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433Erlang-OTP This script is a custom security too...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433Erlang-OTP This script is a custom security too...
CVE-2025-28032
TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm paramet...
Commvault Command Center Innovation Release 11.38 Remote Code Execution
Commvault Command Center Innovation Release version 11.38 proof of concept pre-authentication remote code execution exploit...
CVE-2025-28038
TOTOLINK EX1200T V4.1.2cu.5232B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter...
CVE-2025-28033
TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the...
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
...
CVE-2025-28032
The CVE-2025-28032 issue affects TOTOLINK router models A800R, A810R, A830R, A950RG, A3000RU, and A3100R, with a pre-auth buffer overflow in the setNoticeCfg function via the IpForm parameter. Root cause: buffer overflow in pre-auth code path. Impact is described as a vulnerability in the provide...
TOTOLINK多款产品 安全漏洞
TOTOLINK A800R and others are products of China Gion Electronics TOTOLINK.TOTOLINK A800R is a wireless router.TOTOLINK A830R is a wireless dual-band router.TOTOLINK A810R is a wireless dual-band router.TOTOLINK A810R is a wireless dual-band router.TOTOLINK A810R is a wireless dual-band...
CVE-2025-28033
TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the...