Search Vulnerabilities

Account Takeover via Substring Matching in OpenID Connect Authentication

Tillitis: TKey Client has an Error in Protocol Implementation

MiCode FileExplorer SwiFTP Server Authentication Bypass

Sricam DeviceViewer 3.12.0.1 Password Change Security Bypass

Authentication bypass via userID login when email and username login are disabled

ABB Ability OPTIMAX Authentication Bypass in Single-Sign On

Authentication bypass by brute forcing Authentication Headers

Mattermost Jira plugin user spoofing enables Jira request forgery.

Cal.com Authentication Bypass via bad TOTP + password checks

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

Account Takeover via Code Exchange Endpoint

Account takeover on OAuth/OpenID-enabled servers

Microsoft Exchange Server Elevation of Privilege Vulnerability

Python Social Auth - Django has unsafe account association

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7

ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

immich allows account hijacking through oauth2

SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack

Bypass of System Admin User Deactivation Controls for Personal Access Tokens in Mattermost Server

Google OAuth Authentication Bypass for Converted Bot Accounts