13 matches found
pfsense-api-acb-userkey
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-acb-userkey pfsense-api-acb-userkey Class: IDOR Reach: Remote pfSense Plus MIM API Netgate/pfsense-api b4acd7ca - Netgate GET /services/acb and GET /services/acb/bkp take userkey as an unconstrained query...
CVE-2026-16141
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose HMAC is computed...
CVE-2026-16141 OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose HMAC is computed...
CVE-2026-16141 OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose HMAC is computed...
CVE-2026-16141 OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose HMAC is computed...
CVE-2026-16141: Use of Hard-coded Credentials
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose HMAC is computed...
PT-2026-92020
OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites the authentication object's constructor defaults. The IPMI service then accepts a RAKP Message 3 whose HMAC is computed...
EUVD-2012-1616
Malware in sbrugna...
CVE-2012-1602
user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1...
PT-2015-5636
Name of the Vulnerable Software and Affected Versions PuTTY versions 0.51 through 0.63 Description The issue concerns the ssh2 load userkey and ssh2 save userkey functions, which do not properly wipe SSH-2 private keys from memory. This allows local users to obtain sensitive information by readin...
CVE-2012-1602
user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1...
Authentication flaw
user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1...
PT-2012-3372
Name of the Vulnerable Software and Affected Versions NextBBS version 0.6 Description The issue allows remote attackers to bypass authentication and gain administrator access. This is achieved by setting the userkey cookie to 1, effectively allowing unauthorized access to administrative functions...