Search Vulnerabilities

All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass

WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`

Plex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint

SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling

Authentication Bypass Using an Alternate Path or Channel in Pelco, Inc. Sarix Pro 3 Series IP Cameras

User Registration & Membership <= 5.1.2 - Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel in GitLab

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

WordPress Booked plugin <= 3.0.0 - Account Takeover vulnerability

WordPress AhaChat Messenger Marketing plugin <= 1.1 - Broken Authentication vulnerability

WordPress Miraculous Elementor plugin <= 2.0.7 - Broken Authentication vulnerability

Micca KE700 Acceptance of previously used rolling codes

Admin Account Takeover in Universal Sotware's FlexCity/Kiosk

BloodX 1.0 - Authentication Bypass

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored creden...

Flowring｜Agentflow - Missing Authenticaton

Flowring｜Agentflow - Authentication Bypass

Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005

Disable Login Page - Critical - Access bypass - SA-CONTRIB-2025-124

CKEditor 5 Premium Features - Moderately critical - Access bypass - SA-CONTRIB-2025-118