CVE-2017-16778

An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency DTMF tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an...

CVE-2014-10076

The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack...

PT-2025-21862 · Unknown · Calmkart Django-Sso-Server

Name of the Vulnerable Software and Affected Versions: calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15 Description: A vulnerability was found in the function gen rsa keys of the file common/crypto.py, leading to inadequate encryption strength. The attack can be initiated...

Pgpool-II vulnerable to authentication bypass by primary weakness

Overview Pgpool-II provided by PgPool Global Development Group contains the following vulnerability. Authentication bypass by primary weakness CWE-305 - CVE-2025-46801 PgPool Global Development Group reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and...

Hitachi JP1/IT Desktop Management 2 安全漏洞

Hitachi JP1/IT Desktop Management 2 is an automatic collection of various types of information from Hitachi, Ltd. of Japan Hitachi, allowing you to manage it in one place. A security vulnerability exists in Hitachi JP1/IT Desktop Management 2 versions prior to 12-00 to 12-00-08, 11-10 to 11-10-08...

tranport: TLS host name wildcard matching too lax

...

The vulnerability of the CoreMedia component in operating systems such as macOS, tvOS, iPadOS, iOS, visionOS, and watchOS allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the CoreMedia component in operating systems such as macOS, tvOS, iPadOS, iOS, visionOS, and watchOS is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the FrontBoard component in iPadOS and iOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FrontBoard component in iPadOS and iOS operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

GLSA-202505-10 : Tracker miners: Sandbox weakness

The remote host is affected by the vulnerability described in GLSA-202505-10 Tracker miners: Sandbox weakness A vulnerability has been discovered in Tracker minders. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from...

The vulnerability of the ColdFusion software platform, related to deficiencies in the authentication mechanism, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of MacOS operating systems, related to the lack of authentication, allows attackers to gain unauthorized access to protected information.

The vulnerability of MacOS operating systems is related to the lack of authentication. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CVE-2025-27468 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2024-51447

A vulnerability has been identified in Polarion V2310 All versions, Polarion V2404 All versions V2404.2. The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to...

Intel Tiber Edge Platform Edge Orchestrator 加密问题漏洞

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation Intel. Intel Tiber Edge Platform Edge Orchestrator suffers from an encryption issue vulnerability that stems from insufficient encryption strength and could...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple macOS is a specialized operating system developed for Mac computers. apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in several Apple products that stems from insufficient...

Offensive Security for AI Systems: Concepts, Practices, and Applications

As artificial intelligence AI systems become increasingly adopted across sectors, the need for robust, proactive security strategies is paramount. Traditional defensive measures often fall short against the unique and evolving threats facing AI-driven technologies, making offensive security an...

The vulnerability of the QRadar Advisor with Watson analytical security threat analysis tool lies in insufficient validation of incoming requests, allowing attackers to carry out SSRF attacks.

The vulnerability of the QRadar Advisor with Watson analytical security threat analysis tool is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Python-Programs 加密问题漏洞

Python-Programs is a collection of Python applications by the individual developer Shashikant Singh. Python-Programs suffers from an encryption issue vulnerability that stems from insufficient encryption strength, which could lead to a brute force cracking attack...

CVE-2025-3218

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access...

CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...