Search Vulnerabilities

Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera

OTP Bypass in Universal Sotware's FlexCity

dataCycle No Brute-Force Protection On Web And API Login Endpoints

OpenClaw 2026.2.25 < 2026.5.26 WebSocket Rate Limit Bypass

Yamcs: No Rate Limiting on Authentication Endpoint

Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data

PasswordPusher < 2.9.2 Passphrase Brute-Force via Unthrottled Endpoint

Hydro-Québec Le Circuit Electrique charging station backend Improper Restriction of Excessive Authentication Attempts

Login Disable - Moderately critical - Access bypass - SA-CONTRIB-2026-070

9router: Login brute-force protection bypass via spoofed X-Forwarded-For header

Account Denial of Service in MCO

Improper Restriction of Excessive Authentication Attempts in KTM System e-BOK

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

EVoke Systems EVoke CSMS Improper Restriction of Excessive Authentication Attempts

NocoDB: User Enumeration via Sign-In Timing

Capgo - Password Spraying via Public-Key Accessible Credential Validation Endpoint

AIL Framework - Missing Rate Limiting Enables Brute-Force Attacks Against Two-Factor Authentication Codes

Authelia Missing Username Canonicalization in Basic Auth (LDAP)

OTP Bypass in Başbelen Group's Pause+ Mobile App

Nexus Repository Manager - Improper Restriction of Excessive Authentication Attempts