Lucene search
K

17 matches found

Nuclei
Nuclei
added 17 hours ago64 views

WAVLINK WN530H4 live_api.cgi - Command Injection

A remote command-line injection vulnerability in the /cgi-bin/liveapi.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication. id: CVE-2020-12124 info: name: WAVLINK WN530H4 liveapi.cgi - Command Injection author...

10CVSS8.2AI score0.92291EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2026/05/05 11:39 p.m.67 views

Exploit for Missing Authentication for Critical Function in Cpanel

🔴 cPanelCVE CVE-2026-41940 — cPanel & WHM Authentication...

9.8CVSS5.8AI score0.90762EPSS
Exploits59
EUVD
EUVD
added 2026/04/20 3:31 p.m.0 views

EUVD-2026-23862

An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-level authentication token by sending an unauthenticated request to the livepatchd.sock Unix domain socket. This vulnerability is...

5.7CVSS5.8AI score0.0002EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-7817

Malware in sbrugna...

10CVSS9.4AI score0.00365EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/20 12:0 a.m.0 views

INEA ME RTU Authorization Issues Vulnerability

The INEA ME RTU is a remote terminal unit from INEA. It implements the data interface between the remote device and the control center. A security vulnerability exists in INEA ME RTU version 3.36b and earlier, which stems from the fact that authentication of the root account on the device's host...

9.8CVSS7.2AI score0.00116EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:52 a.m.1 views

SUSE CVE-2020-27780

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate...

9.8CVSS6.8AI score0.00444EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2021/09/14 12:37 p.m.2 views

keycloak-model-infinispan: authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly could lead to a DoS attack

A flaw was found in keycloak-model-infinispan where the authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly. This issue leads to a denial of service...

7.5CVSS5.7AI score0.00468EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/09/14 12:35 p.m.4 views

keycloak-model-infinispan: authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly could lead to a DoS attack

A flaw was found in keycloak-model-infinispan where the authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly. This issue leads to a denial of service...

7.5CVSS5.7AI score0.00468EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/09/14 12:34 p.m.1 views

keycloak-model-infinispan: authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly could lead to a DoS attack

A flaw was found in keycloak-model-infinispan where the authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly. This issue leads to a denial of service...

7.5CVSS5.7AI score0.00468EPSS
Exploits0References4
OSV
OSV
added 2021/02/01 2:15 a.m.1 views

CVE-2020-15835

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function contains undocumented code that provides the ability to authenticate as root without knowing the actual root password. An adversary with the private key can remotely authenticate to the...

9.8CVSS7.4AI score
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2020/12/23 8:0 a.m.2 views

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

...

10CVSS7AI score0.00444EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2020/12/17 11:55 p.m.27 views

CVE-2020-27780

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate...

10CVSS9.5AI score0.00444EPSS
Exploits0
Cvelist
Cvelist
added 2019/07/01 8:1 p.m.17 views

CVE-2019-7274

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root...

9.7AI score0.62918EPSS
Exploits5References4
Tenable Nessus
Tenable Nessus
added 2017/11/28 12:0 a.m.45 views

MacOS 10.13 root Authentication Bypass (Security Update 2017-001)

The remote host is running a version of MacOS 10.13 or 10.13.1 that is missing a security update. It is, therefore, affected by a root authentication bypass vulnerability. A local attacker or a remote attacker with credentials for a standard user account has the ability to blank out the root...

9.3CVSS7.8AI score0.76664EPSS
Exploits6References7
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.92 views

F5 BIG-IP Remote Root Authentication Bypass Vulnerability

No description provided by source. Matta Consulting - Matta Advisory https://www.trustmatta.com F5 BIG-IP remote root authentication bypass Vulnerability Advisory ID: MATTA-2012-002 CVE reference: CVE-2012-1493 Affected platforms: BIG-IP platforms without SCCP Version: 11.x 10.x 9.x Date:...

7.8CVSS8.1AI score0.84375EPSS
Exploits15
Packet Storm
Packet Storm
added 2012/06/12 12:0 a.m.71 views

F5 BIG-IP Remote Root Authentication Bypass

Matta Consulting - Matta Advisory https://www.trustmatta.com F5 BIG-IP remote root authentication bypass Vulnerability Advisory ID: MATTA-2012-002 CVE reference: CVE-2012-1493 Affected platforms: BIG-IP platforms without SCCP Version: 11.x 10.x 9.x Date: 2012-February-16 Security risk: High...

7.8CVSS0.5AI score0.84375EPSS
Exploits15
Exploit DB
Exploit DB
added 2012/06/12 12:0 a.m.60 views

F5 BIG-IP - Authentication Bypass

!/usr/bin/python Title: F5 BIG-IP Remote Root Authentication Bypass Vulnerability py Quick script written by Dave Kennedy ReL1K for F5 authentication root bypass http://www.secmaniac.com import subprocess,os filewrite = file"priv.key", "w" filewrite.write"""-----BEGIN RSA PRIVATE KEY-----...

7.4AI score
Exploits0
Rows per page
Query Builder