Search Vulnerabilities

Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo

A local user can be impersonated when using federated authentication with Silent JIT Provisioning.

WordPress WooODT Lite plugin <= 2.5.2 - Payment Bypass Vulnerability vulnerability

Caido has an insufficient patch for DNS rebind leading to RCE

FUXA Unauthenticated Remote Code Execution in Node-RED Integration

RustFS sourceIp bypass via spoofed X-Forwarded-For/Real-IP headers

Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass

Logic Vulnerability on TP-Link Archer C20 and Archer AX53

An issue was discovered in OpenStack keystonemiddleware 10

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authenticat...

Authentication Bypass

Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a ...

n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks

Signal K Server Vulnerable to Access Request Spoofing

Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses

QTS, QuTS hero

Authentication bypass on web interface

SWD Interface Open on Growatt ShineLan-X

Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing