Search Vulnerabilities

OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding

OpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verification

mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equality

OpenClaw < 2026.3.13 - Bootstrap Setup Code Replay via Device Pairing

Dovecot OTP authentication is vulnerable to replay attack under specific conditions

Shenzhen HCC Technology MPOS M6 PLUS Bluetooth authentication replay

OpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization

OpenClaw < 2026.2.25 - Webhook Replay Attack via Missing Durable Replay Suppression

Authentication Bypass due to Improper Session Validation

OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay

RustDesk Client Generates Auth Proof Without Client-Side Nonce, Enabling Replay Attacks

Micca KE700 Acceptance of previously used rolling codes

DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairing authentication replay

lakeFS is Missing Timestamp Validation in S3 Gateway Authentication

Pterodactyl TOTPs can be reused during validity window

A vulnerability has been identified in Gridscale X Prepay (All versions < V4

Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilities

Azure Bastion Elevation of Privilege Vulnerability

A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl

Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx