Search Vulnerabilities

Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback

Client-Side Enforcement of Server-Side Security in IBM Db2 Intelligence Center

1Panel – CAPTCHA Bypass via Client-Controlled Flag

IBM Controller Validation Bypass

SKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass

Authentication Bypass in Turkguven's Perfektive

Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment...

Foreman: os command injection via ct_location and fcct_location parameters

security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.

WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration

Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to enter invalid competency dat...

Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional

IBM Engineering Requirements Management Doors Next data modification

IBM Engineering Requirements Management Doors Next security bypass

Viessmann Vitogate 300 Authentication Bypass

Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security

Order Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts

LitmusChaos Litmus client-side enforcement of server-side security

OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass

IBM Aspera Faspex bypass security