Search Vulnerabilities

Authentication Bypass via Null Short-Circuit in Grav CMS Scheduler Webhook Token Check

ASP.NET Core Elevation of Privilege Vulnerability

Windows SMB Server Elevation of Privilege Vulnerability

Over-inclusive team membership expansion in GitHub App authentication provider for Rancher

UDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator`

Org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-services

Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability

Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key

CoreDNS TSIG authentication bypass on encrypted DNS transports

Account Takeover via Substring Matching in OpenID Connect Authentication

Tillitis: TKey Client has an Error in Protocol Implementation

MiCode FileExplorer SwiFTP Server Authentication Bypass

Sricam DeviceViewer 3.12.0.1 Password Change Security Bypass

Authentication bypass via userID login when email and username login are disabled

EspoCRM 5.7.0 < 5.9.0 - Two-Factor Authentication Bypass via Auth Token Reuse Between Accounts with Identical Passwords

ABB Ability OPTIMAX Authentication Bypass in Single-Sign On

Authentication bypass by brute forcing Authentication Headers

Mattermost Jira plugin user spoofing enables Jira request forgery.

Cal.com Authentication Bypass via bad TOTP + password checks

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover