210822 matches found
CVE-2026-76938 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31...
EUVD-2026-110658
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31...
CVE-2026-107147
The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...
CVE-2026-107147
The twofactor_gauthenticator plugin for Roundcube is vulnerable to a 2FA authentication bypass due to a lack of validation for Client-IP and X-Forwarded-For headers. An attacker who possesses a user's password can spoof a whitelisted IP address to bypass the second factor. This issue was resolved...
CVE-2026-107147 Authentication bypass by spoofing in twofactor_gauthenticator
The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...
CVE-2026-107147 Authentication bypass by spoofing in twofactor_gauthenticator
The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...
CVE-2026-92885
The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...
Exploit for CVE-2026-114509
CVE-2026-114509 Laravel TokenGuard authentication bypass thro...
Sensitive Information Disclosure
org.asynchttpclient, async-http-client is vulnerable to sensitive information disclosure. The vulnerability is due to improper handling of proxy authentication headers when using an authenticated SOCKS proxy, which allows an attacker-controlled origin to obtain proxy credentials, including Basic,...
CVE-2026-92885
The Qode Membership plugin for WordPress (versions up to and including 2.0.6.2 ) is vulnerable to an Authentication Bypass leading to Account Takeover . The root cause is a typographic error in the qode_membership_login_user_from_social_network function where the code checks an undefined variable...
CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login
The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...
CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login
The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...
EUVD-2026-110640
The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...
CyberSecVulnerabilitiesDemo
CyberSec Vulnerabilities Demo Cybersecurity demonstrations fo...
hunt-for-cve-2018-10933
Hunt for and Exploit the libSSH Authentication Bypass CVE-2018-10933 Practical Guide explaining how to find hosts vulnerable to the libSSH Authentication Bypass CVE-2018-10933 and how to exploit them to gain shell access. Please refer to the following blog post for instructions:...
WordPress Qode Membership plugin <= 2.0.6.2 - Authentication Bypass vulnerability
Authentication Bypass vulnerability discovered by 0xwackydawg in WordPress Plugin Qode Membership versions = 2.0.6.2...
dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine CERT-UA has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating...
crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...
crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...