Search Vulnerabilities

Loytec LINX firmware: Improper Authentication in PAM configuration

Azure Key Vault Elevation of Privilege Vulnerability

Microsoft Exchange Online Tampering Vulnerability

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

MFA Bypass in MOVEit Transfer

Premium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' Parameter

Management Authentication Bypass and Privilege Escalation

Authentication Bypass in the SmartConsole Login Process Using an Application Token

FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL

FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails

SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability

FreeScout Allows Unauthenticated Access to Legacy Attachment Files

xrdp: No authentication required with Xvnc backend on RHEL 9

Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance

Webmin 2FA requirement bypass

newpanjing simpleui AjaxAdmin AJAX Endpoint admin.py self.get_action missing authentication

Gerapy Project Upload Endpoint views.py missing authentication

Sipeed PicoClaw First Run Setup access_control.go authentication bypass

SurrealDB before 1.5.4 Authentication Bypass via Database Switch

VMware Avi Load Balancer Authentication Bypass Vulnerability