Search Vulnerabilities

.NET Security Feature Bypass Vulnerability

ASP.NET Core Elevation of Privilege Vulnerability

DroneAware's Improper Account Activation in Registration and SSO Flows Leads to Account Takeover

Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery

NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / session swapping

Dell ECS versions 3

elabftw allows MFA bypass during login

WeGIA has SQL Injection via Session Variable Override in DespachoControle.php

kcp's cache server is accessible without authentication or authorization checks

ZITADEL's truncated opaque tokens are still valid

An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2

2FA Expiry Bypass in Optimus Software's Brokerage Automation

Azure DevOps Server Elevation of Privilege Vulnerability

Cisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability

Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect

Azure DevOps Elevation of Privilege Vulnerability

Authentication Bypass Vulnerability in RupeeWeb trading platform

Authentication bypass via authorization code injection in SAP Approuter

In One Identity Identity Manager 9

Changing Information Technology CGFIDO - Authentication Bypass