Search Vulnerabilities

Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass Using an Alternate Path or Channel

WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability

WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability

FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection

Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0

Frappe LMS enrollment bypass in paid courses via unrelated batch

Sipeed PicoClaw First Run Setup access_control.go authentication bypass

Microsoft Edge (Chromium-based) Tampering Vulnerability

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path ...

WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability

WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability

WordPress OAuth Single Sign On - SSO (OAuth Client) plugin <= 38.5.8 - Broken Authentication vulnerability

MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management

SFTP Server Authentication Weakness

Cross-Tenant Access via Application Consent Mismanagement in Multiple WSO2 Products Allows Unauthorized Data Exposure

Blocked users can create and edit WikiLambda objects

AS228T - Authentication Bypass Vulnerability

In Modem, there is a possible information disclosure due to improper input validation

In Modem, there is a possible system crash due to improper input validation

Ocelot - IP Allow/Block List Bypass for WebSocket Upgrade Requests