in apolloconfig/apollo

✍️ Description The Application does not have control set in password complexity. It is possible to add a user with a single character password in the application. 🕵️‍♂️ Proof of Concept Adding the user. POST /users HTTP/1.1 Host: xxx.xxx.xxx.xxx Content-Length: 63 Accept: application/json,...

PT-2009-6303 · Gnu · Grub

Name of the Vulnerable Software and Affected Versions: GNU GRand Unified Bootloader GRUB 2 version 1.97 Description: The issue allows physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1, as the software only compares t...

Дырка в Spy Anywhere (unprotected admin access)

Используя парль из одного символа можно подключиться с привилегиями администратора...