Search Vulnerabilities

Plex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint

Microsoft Word Security Feature Bypass Vulnerability

Cube privilege escalation via a specially crafted request

vscode-spell-checker has a workspace-trust bypass Code Execution

Microsoft Office Security Feature Bypass Vulnerability

MyTube has Rate Limiting Bypass via X-Forwarded-For Header Spoofing

Windows Kerberos Elevation of Privilege Vulnerability

1Panel – CAPTCHA Bypass via Client-Controlled Flag

cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust

cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

Authentication Bypass in Turkguven's Perfektive

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting

flaskBlog allows arbitrary privilege escalation

flaskBlog Stored XSS Vulnerability

The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21