Search Vulnerabilities

Telesquare SKT LTE Router SDT-CS3B1 Unauthenticated Remote Reboot

Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication

Serviio PRO 1.8 Unauthenticated Password Change via REST API

Serviio PRO 1.8 REST API Information Disclosure

Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability

Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability

Parse Server GraphQL WebSocket endpoint bypasses security middleware

LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link

Dagu SSE Authentication Bypass in Basic Auth Mode

Configuration Data Spill

Device Reboot Control

The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability

Honeywell IQ4x BMS Controller Missing authentication for critical function

ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data

Runtipi unauthenticated /api/auth/reset-password allows operator account takeover during active reset window

Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k Restricted Shell Escape

Vociferous Unauthenticated Remote Path Traversal (RCE via CSRF)

Azure IoT Explorer Information Disclosure Vulnerability

FileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info

RCE in TUBITAK BILGEM's Liderahenk