Base de CVEs

Uma vulnerabilidade de ausência de autenticação para função crítica na série KiloView Encoder poderia permitir que um atacante não autenticado crie ou exclua contas de administrador. Esta vulnerabilidade pode conceder ao atacante controle administrativo total sobre o produto.

The exos 9300 application can be used to configure Access Managers (e.g. 92xx, 9230 and 9290). The configuration is done in a graphical user interface on the dormakaba exos server. As soon as the save button is clicked in exos 9300, the whole configuration is sent to the selected Access Manager via SOAP. The SOAP request is sent without any prior authentication or authorization by default. Though authentication and authorization can be configured using IPsec for 92xx-K5 devices and mTLS for 92xx-K7 devices, it is not enabled by default and must therefore be activated with additional steps. This insecure default allows an attacker with network level access to completely control the whole environment. An attacker is for example easily able to conduct the following tasks without prior authentication: - Re-configure Access Managers (e.g. remove alarming system requirements) - Freely re-configure the inputs and outputs - Open all connected doors permanently - Open all doors for a defined time interval - Change the admin password - and many more Network level access can be gained due to an insufficient network segmentation as well as missing LAN firewalls. Devices with an insecure configuration have been identified to be directly exposed to the internet.

On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sending requests. Therefore, network access to the exos server allows e.g. the creation of arbitrary access log events as well as querying the 2FA PINs associated with the enrolled chip cards.

A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker is presented with a directory-style index listing all available backend services and POS web services, each with an HTML form for submitting test input. These panels are intended for developer use, but are accessible in production environments with no authentication or session validation. This grants any external actor the ability to discover, test, and execute API endpoints that perform critical functions including but not limited to user transaction retrieval, credit adjustments, POS actions, and internal data queries.

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the vulnerable application.

Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download and execute malicious payloads.

IAQS and I6 developed by JNC has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly operate system administrative functionalities.

Dragonfly é um sistema open source de distribuição de arquivos e aceleração de imagens baseado em P2P. Nas versões 2.4.1-rc.0 e anteriores, os endpoints da Job API (/api/v1/jobs) não possuem middleware de autenticação JWT nem verificações de autorização RBAC na configuração de rotas. Isso permite que qualquer usuário não autenticado com acesso à API do Manager visualize, atualize e exclua jobs. O problema foi corrigido na versão 2.4.1-rc.1.

This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechanisms, allowing unauthorized users to establish connections. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead to privilege escalation and potentially compromise the security of the entire system.

O Arcane é uma interface para gerenciar contêineres, imagens, redes e volumes Docker. Antes da versão 1.13.2, requisições não autenticadas podiam ser encaminhadas (proxy) a agentes de ambientes remotos, permitindo acesso a recursos desses ambientes sem autenticação. O middleware de proxy de ambientes tratava requisições para /api/environments/{id}/... de ambientes remotos antes que a autenticação fosse aplicada. Quando o ID do ambiente não era local, o middleware encaminhava a requisição e anexava o token de agente mantido pelo gerenciador, mesmo quando o chamador não estava autenticado. Isso possibilitava acesso não autenticado a operações de ambientes remotos (por exemplo, listar contêineres, transmitir logs ou outros endpoints de agente). Um atacante não autenticado poderia acessar e manipular recursos de ambientes remotos por meio do proxy, o que potencialmente levaria à exposição de dados, alterações não autorizadas ou interrupção de serviço. A versão 1.13.2 corrige a vulnerabilidade.

MCPJam inspector é a plataforma de desenvolvimento local-first para servidores MCP. As versões 1.4.2 e anteriores são vulneráveis a uma vulnerabilidade de execução remota de código (RCE), que permite a um invasor enviar uma requisição HTTP criada que dispara a instalação de um servidor MCP, levando a RCE. Como o MCPJam inspector escuta por padrão em 0.0.0.0 em vez de 127.0.0.1, um invasor pode disparar a RCE remotamente por meio de uma simples requisição HTTP. A versão 1.4.3 contém uma correção.

Delta Electronics DIAView has multiple vulnerabilities.

Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET Remoting exposure in the SmartCardController service (DCG.SmartCardControllerService.exe). The service registers a TCP remoting channel with unsafe formatter/settings that permit untrusted remoting object invocation. A remote, unauthenticated attacker who can reach the remoting port can invoke exposed remoting objects to read arbitrary files from the server and coerce outbound authentication, and may achieve arbitrary file write and remote code execution via known .NET Remoting exploitation techniques. This can lead to disclosure of sensitive installation and service-account data and compromise of the affected host.

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.