Search Vulnerabilities

Vulnerabilities found in Watson Data Intelligence

Insufficient validation of payment status in pretix-mollie

Insufficient validation of payment status in pretix-oppwa

Insufficient validation of payment status in pretix-computop

Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission

Nimiq light-blockchain: Light blockchain rebranch issue

gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM

AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute

Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user ...

Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection

YAF.NET: Pre-Handler Authorization Bypass on Admin Pages Enabling Blind SQL Execution via `/Admin/RunSql`

net-imap vulnerable to STARTTLS stripping via invalid response timing

Mastodon: Insufficient verification of email addresses

Botan has a TLS 1.3 certificate authentication bypass

IBM Aspera Console Denial of Service

RustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies

Improper Enforcement of Behavioral Controls in Devolutions Server 2025

Chamilo: Friend Request Workflow Bypass - Unauthorized Friend Addition and ID Validation Bypass

Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities

Interactive service agent in OpenVPN version 2