Search Vulnerabilities

ABB Ability OPTIMAX Authentication Bypass in Single-Sign On

Authentication bypass by brute forcing Authentication Headers

Mattermost Jira plugin user spoofing enables Jira request forgery.

Cal.com Authentication Bypass via bad TOTP + password checks

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

Account Takeover via Code Exchange Endpoint

Account takeover on OAuth/OpenID-enabled servers

Microsoft Exchange Server Elevation of Privilege Vulnerability

Python Social Auth - Django has unsafe account association

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7

ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

immich allows account hijacking through oauth2

SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack

Bypass of System Admin User Deactivation Controls for Personal Access Tokens in Mattermost Server

Google OAuth Authentication Bypass for Converted Bot Accounts

Unauthorized Bot Login Using Credentials

Improper session handling in B&R APROL

GLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin

Windows NTLM V1 Elevation of Privilege Vulnerability

Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption