Search Vulnerabilities

BridgeHead FileStore < 24A Apache Axis2 Default Credentials RCE

Insecure Default Configuration in P4 Server

Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

Initialization of a resource with an insecure default vulnerability exists in SD-330AC and AMC Manager provided by silex technology, Inc

Initialization of a resource with an insecure default in OpenPLC_V3

Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist

Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initializatio...

OpenClaw < 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox Flag

Traefik mTLS bypass via fragmented ClientHello SNI extraction failure

FileRise: Default Encryption Key Enables Token Forgery and Config Decryption

WWBN AVideo has predictable default admin credentials in official Docker deployment path

AnythingLLM Permissable CORS policy

Himmelblau unset domain configuration can allow any-tenant authentication at first login for remote deployments

Mongoose Web Server 6.9 Denial of Service via Socket Connection

AMPPS 2.7 Denial of Service via Malformed Socket Connection

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Unauthenticated RCE via SNMP Default Writable Community String

Beetel 777VR1 Telnet Service/SSH Service insecure default initialization of resource