Tag: authentication bypass
Second N-able patch closes N-central hole after attackers slip past first
Attackers used an authentication bypass in N-able N-central to reach managed endpoints, and the vendor's first fix did not block…
Image uploads can leak Rails master keys through critical Active Storage bug
A CVSS 9.5 Rails Active Storage flaw lets unauthenticated attackers read arbitrary server files through crafted image uploads.
Standard users can forge domain credentials through Certighost AD certificate bug
A newly patched Active Directory flaw let standard domain users impersonate domain controllers and forge authentication tokens.
Check Point rushes fix for actively exploited SmartConsole bypass
Check Point patched a critical SmartConsole authentication bypass under active exploitation that gives attackers full admin access to security management…
Critical RabbitMQ bug exposes OAuth secrets to unauthenticated attackers
A high-severity flaw in RabbitMQ lets attackers steal OAuth secrets from the management interface without authentication.
Authenticated Remote Code Execution Risk in Splunk Enterprise
An unauthenticated attacker can exploit a missing authentication control in Splunk Enterprise's PostgreSQL sidecar to write arbitrary files and execute…
CISA Warns of Active Exploitation in Palo Alto Firewall OS Flaw
The flaw enables remote attackers to bypass authentication and establish unauthorized VPN access on Palo Alto firewalls, with active exploitation…
Active Exploitation of PAN OS Authentication Flaw Targets Global Protect Gateways
Threat actors are actively exploiting an authentication bypass flaw in Palo Alto Networks PAN OS that allows forged cookies to…