Search Vulnerabilities

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authenticat...

Authentication Bypass

Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a ...

n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks

Signal K Server Vulnerable to Access Request Spoofing

Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses

QTS, QuTS hero

Authentication bypass on web interface

SWD Interface Open on Growatt ShineLan-X

Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing

Bypass in the authentication method of the GTT Sistema de Información Tributario application

1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers

1Panel – CAPTCHA Bypass via Client-Controlled Flag

cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

Application Installation Source Verification Flaw May Lead to Risk Detection Bypass

The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets

Authentication Bypass by Spoofing in GitLab

Looker account compromise via punycode homograph attack

WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability