Lucene search
+L

32 matches found

BDU FSTEC
BDU FSTEC
•added 2026/01/09 12:00 a.m.•14 views

The vulnerability of the Wondershare Repairit software for repairing damaged files lies in the improper assignment of permissions to critical resources, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Wondershare Repairit software for repairing damaged files is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

9.4CVSS7.6AI score0.0284EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/01/09 12:00 a.m.•53 views

The vulnerability of the Wondershare Repairit software for repairing damaged files lies in the improper assignment of privileges, which allows attackers to bypass existing security restrictions.

The vulnerability of the Wondershare Repairit software for repairing damaged files is related to improper privilege assignment. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions remotely...

9.7CVSS7.6AI score0.02996EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2025/10/08 12:00 a.m.•14 views

(0Day) Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to an SAS token. An attacker can leverage this vulnerability to launch a supply-chain...

9.4CVSS9.8AI score0.02996EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/10/08 12:00 a.m.•18 views

(0Day) Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to a storage account token. An attacker can leverage this...

9.1CVSS9.5AI score0.0284EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-31500

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00433EPSS
SaveExploits1References1
The Hacker News
The Hacker News
•added 2025/09/24 1:55 p.m.•11 views

Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models

Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the system to artificial intelligence AI model tampering and supply chain risks. The critical-rated vulnerabilities in question, discovered by Trend Micro, ar...

9.4CVSS8AI score0.02996EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2025/09/24 1:55 p.m.•7 views

Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models

Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the system to artificial intelligence AI model tampering and supply chain risks. The critical-rated vulnerabilities in question, discovered by Trend Micro, ar...

9.4CVSS9.5AI score0.02996EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/09/19 9:26 p.m.•12 views

CVE-2025-10644

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS8AI score0.02996EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/19 9:26 p.m.•12 views

CVE-2025-10643

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS7.1AI score0.0284EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/17 9:15 p.m.•8 views

CVE-2025-10644

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS6.2AI score0.02996EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/17 9:15 p.m.•12 views

CVE-2025-10643

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS0.0284EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/17 9:15 p.m.•13 views

CVE-2025-10644

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS0.02996EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/17 9:15 p.m.•10 views

CVE-2025-10643

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS5.9AI score0.0284EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/17 8:41 p.m.•38 views

CVE-2025-10644

CVE-2025-10644 affects Wondershare Repairit and involves SAS token permission misconfigurations that allow authentication bypass and could enable remote code execution on customer endpoints. The vulnerability arises from overly permissive permissions granted to a storage account token, per ZDI-25...

9.4CVSS7.6AI score0.02996EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/09/17 8:41 p.m.•25 views

CVE-2025-10644 Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS0.02996EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/17 8:41 p.m.•4 views

CVE-2025-10644 Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS9.7AI score0.02996EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/17 8:41 p.m.•5 views

CVE-2025-10643 Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS9.3AI score0.0284EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/17 8:41 p.m.•30 views

CVE-2025-10643 Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.1CVSS0.0284EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/17 8:41 p.m.•49 views

CVE-2025-10643

Wondershare Repairit contains an authentication bypass vulnerability (CVE-2025-10643) caused by incorrect permissions for a storage account token. The flaw allows remote attackers to bypass authentication on affected installations, with CVSS3 base score 9.1 (CRITICAL) and an attack vector of NETW...

9.1CVSS6.7AI score0.0284EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/17 12:00 a.m.•1 views

CVE-2025-10644: Incorrect Privilege Assignment

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.4CVSS8.6AI score0.02996EPSS
SaveExploits0References1
Rows per page
Query Builder