sj

sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...

CVE-2026-124414

Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.This issue affects Broadcast Live Video: from n/a through 7.3.15...

EUVD-2026-125425

Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.This issue affects Broadcast Live Video: from n/a through 7.3.15...

ls-poc

CVE-2026-30368 Proof of concept !IMPORTANT This is patched and now requires credentials, use the workaround to perform actions on yourself. Introduction CVE-2026-30368 allows an attacker to control student devices via a weak authentication flaw in Lightspeed Classroom management. The POC poc.js...

AttackTomcat

AttackTomcat Vulnerability Detection List CVE-2017-12615 PUT file upload vulnerability tomcat-pass-getshell weak authentication deployment war package Weak password brute force CVE-2020-1938 Tomcat file read/inclusion Usage Before first use, please reset the configuration file in settings. For...

CVE-2025-70994

CVE-2025-70994: Weak Authentication in Yadea T5 Electric Bicycle !WARNING This repository is published strictly for educational and academic security research purposes. The information and proof-of-concept code provided here are intended to demonstrate a known cryptographic flaw CWE-1390 to assis...

CVE-2024-33676

CVE-2024-33676 Weak authentication and authorization on Enel X JuiceBox Level 2 EV charger enables access to operating system functions and parameters. Description Users on the local EV charger WLAN network can extract PII, change settings, and manipulate the operating system file system. This is...

PT-2026-146906

Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.This issue affects Broadcast Live Video: from n/a through 7.3.15...

CVE-2026-96018

Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally...

CVE-2026-95944

Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally...

CVE-2026-120783

Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-119991

Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network...

CVE-2026-118735

Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-118157

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-113766

Weak authentication in Windows Language Experience Service allows an authorized attacker to perform tampering locally...

CVE-2026-112979

Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally...

EUVD-2026-122487

Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network...

EUVD-2026-122282

Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-120783

A weak authentication vulnerability exists in Azure DevOps Server , which allows an authorized attacker to elevate privileges over a network. The vulnerability is confirmed with a CVSS 3.1 score of 6.4 (Medium severity) and is categorized under CWE-1390 . While the vulnerability is confirmed, spe...

CVE-2026-118157

A weak authentication vulnerability in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. This issue is categorized under CWE-1390 . Microsoft has released updates to resolve this vulnerability, and users are recommended to install the latest security up...