CVE-2024-6387-OpenSSH-Analysis

CVE-2024-6387 OpenSSH Analysis Overview Security analysis of CVE-2024-6387 vulnerability affecting OpenSSH server. Tools Used Kali Linux Nmap Metasploitable 2 Vulnerability Details CVE-2024-6387 is a vulnerability in OpenSSH caused by a race condition in sshd, which may allow an unauthorised remo...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

CVE-2026-94459

IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in...

CVE-2026-94460

The IRISPowerscan software contains an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password . This vulnerability (CWE-276) could allow an unauthenticated attacker to gain unauthorized access to privileged application fu...

CVE-2026-94459 IRISPowerscan Default accounts with predictable credentials

IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in...

CVE-2026-94459

The software IRISPowerscan contains default user accounts with predictable credentials . An unauthenticated attacker with network access to an affected installation can use these credentials to authenticate and access application functionality. This vulnerability could lead to unauthorised access...

EUVD-2026-116799

IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in...

CVE-2026-63244

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...

CVE-2026-63244 Authentication Bypass Vulnerability

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...

CVE-2026-63244 Authentication Bypass Vulnerability

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...

CVE-2026-63244

An authentication bypass vulnerability exists in WizLearn Technologies' Learning Management System (LMS) . An unauthenticated remote attacker can bypass both password authentication and the OAuth authentication flow by sending a specially crafted POST request . Successful exploitation could lead ...

EUVD-2026-108611

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...

PT-2026-121787

Name of the Vulnerable Software and Affected Versions WizLearn Technologies' Learning Management System affected versions not specified Description An authentication bypass allows an unauthenticated remote attacker to circumvent password authentication and the OAuth authentication flow. This is...

CVE-2026-92378

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

EUVD-2026-85153

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

CVE-2026-92378 uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function Login

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

CVE-2026-92378 uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function Login

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

CVE-2026-92378

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online . Under specific timing conditions during Service Offline Emergency Mode , a previously authenticated session may be retained after a user logs out. This flaw could allow a subseque...

CVE-2026-92378: Insufficient Session Expiration

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

PT-2026-93947

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...