Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.5 views

PT-2026-56281

Name of the Vulnerable Software and Affected Versions Fire-Boltt Smartwatch FB BGS001 version MOY-JS14-2.0.4 Description Improper authentication allows the device to accept GATT Write Request commands without sufficient authentication or strong session validation. This enables a nearby device to...

9.8CVSS6.1AI score0.00373EPSS
Exploits0References6
NVD
NVD
added 2026/05/13 9:16 p.m.14 views

CVE-2026-42602

azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows any party who holds a single valid Azure access token for any scope the collector's configured identity can mint for to authenticate to any...

8.1CVSS0.00222EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/05/13 8:12 p.m.7 views

CVE-2026-42602

azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0, a server-side authentication bypass in azureauthextension allows any party who holds a single valid Azure access token for any scope the collector's configured identity can mint for to authenticate to any...

8.1CVSS5.8AI score0.00222EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2025/08/15 12:0 a.m.5 views

OpenBao suffers from an unspecified vulnerability (CNVD-2025-18607)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which stems from the TOTP key engine being able to accept valid code multiple times, and no details of the vulnerability are provided at this time...

6.5CVSS7AI score0.00209EPSS
Exploits0References1
Hacker One
Hacker One
added 2025/07/24 10:44 a.m.29 views

Malwarebytes: Replayable Password Change Request Across Sessions.

Vulnerability description not provided...

7.1AI score
Exploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.4 views

PT-2025-37964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential inconsistent update of the reference count was identified in the smb2 compound op function. This inconsistency could lead to resource leaks. The issue arises because the...

5.5CVSS6.2AI score0.00137EPSS
Exploits0
Code423n4
Code423n4
added 2023/01/30 12:0 a.m.10 views

Replayable signature in the mintReceipt function

Lines of code Vulnerability details Description In the mintReceipt function there is a check of the claimSignerAddress signature: if keccak256abi.encodePackedmsg.sender, questId != hash revert InvalidHash; if recoverSignerhash, signature != claimSignerAddress revert AddressNotSigned; The signatur...

6.8AI score
Exploits0
Rows per page
Query Builder