Search Vulnerabilities

Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication ve...

Rocket.Chat: 2FA bypass and login of deactivated users via EE ddp-streamer

Liferay DXP 2023

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5

LinkJoin through 882f196 mishandles token ownership in password reset

A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7

Signal App Biometric Authentication missing critical step in authentication

In JetBrains Toolbox App before 2

Authentication Bypass in gaizhenbiao/ChuanhuChatGPT

IDOR Vulnerability in transformeroptimus/superagi

Authentication Bypass in composiohq/composio

Missing check_access in lollms_binding_infos in parisneo/lollms

Improper Access Control in Elfatek Elektronics' ANKA JPD-00028

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID

Dell Enterprise SONiC OS, version(s) 4

Multi-Factor Authentication Bypass in Progress WS_FTP Server

Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation

Infinispan: non-admins should not be able to get cache config via rest api

Infispan: rest bulk ops don't check permissions

Mandatory control bypass in Lime2