Lucene search
+L

169773 matches found

Nuclei
Nuclei
added 2026/08/24 5:53 a.m.285 views

JetBrains TeamCity > 2023.11.3 - Authentication Bypass

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible id: CVE-2024-23917 info: name: JetBrains TeamCity 2023.11.3 - Authentication Bypass author: iamnoooob,rootxharsh,pdresearch severity: critical description: | In JetBrains TeamCity before 2023.11.3...

9.8CVSS9.1AI score0.5373EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.29 views

Dozzle - Server Side Request Forgery

Dozzle prior to 10.5.2 contains a server-side request forgery caused by unauthenticated access to POST /api/notifications/test-webhook forwarding attacker-controlled URLs, letting remote attackers send arbitrary HTTP POST requests and receive response data, exploit requires no authentication. id:...

8.6CVSS9AI score0.01491EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.22 views

Rclone RC - Broken Access Control

Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...

9.8CVSS8.5AI score0.32715EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.41 views

WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass

Burst Statistics – Privacy-Friendly WordPress Analytics plugin 3.4.0 to 3.4.1.1 contains an authentication bypass caused by incorrect return-value handling in ismainwpauthenticated function, letting unauthenticated attackers impersonate administrators, exploit requires knowledge of an administrat...

9.8CVSS5.3AI score0.14608EPSS
SaveExploits12References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.35 views

phpBB < 3.3.17 - Authentication Bypass

phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the authprovider query parameter to "apache", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts th...

9.8CVSS8.8AI score0.0386EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.184 views

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution. id: CVE-2026-2699 inf...

9.8CVSS9.2AI score0.58386EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.53 views

MLflow Job API - Authentication Bypass

MLflow latest version contains an authentication bypass caused by unprotected FastAPI job endpoints under /ajax-api/3.0/jobs/ when basic-auth is enabled, letting unauthenticated network clients submit and manage jobs, exploit requires job execution enabled and allowlisted job functions. id:...

9.8CVSS8.7AI score0.04392EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.25 views

FortiClient EMS - Authentication Bypass

Detects whether Fortinet hotfix FG-IR-26-099 for CVE-2026-35616 is missing by comparing behavioral responses from a certificate-authenticated endpoint. The template sends X-SSL-CLIENT-VERIFY: SUCCESS without certificate material and checks whether this spoofed header changes server behavior. id:...

9.8CVSS8.9AI score0.90749EPSS
SaveExploits8References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.53 views

WordPress Symposium <=15.8.1 - Cross-Site Scripting

WordPress Symposium through 15.8.1 contains a reflected cross-site scripting vulnerability via the wp-content/plugins/wp-symposium/getalbumitem.php?size parameter which allows an attacker to steal cookie-based authentication credentials and launch other attacks. id: CVE-2015-9414 info: name:...

6.1CVSS5.8AI score0.03605EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.113 views

Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS)

It is possible to inject arbitrary JavaScript code into the /browse endpoint of the Calibre content server, allowing an attacker to craft a URL that when clicked by a victim, will execute the attacker’s JavaScript code in the context of the victim’s browser. If the Calibre server is running with...

6.1CVSS5.9AI score0.25607EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.60 views

D-Tale 3.10.0 - 3.15.1 - Authentication Bypass & Remote Code Execution

man-group/dtale 3.10.0 contains an authentication bypass and remote code execution caused by improper input validation and a hardcoded SECRETKEY in Flask configuration, letting attackers forge session cookies and execute arbitrary code, exploit requires attacker to access the application. id:...

9.8CVSS9.7AI score0.77951EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.311 views

OpenMetadata - Authentication Bypass

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

9.8CVSS9AI score0.73255EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.14 views

Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 20260320 through 20260501 contains an authentication bypass caused by exploitation of a shared cryptographic key and encryption oracle in dbbak.php and loggingctl::loggingmore, letting unauthenticated remote attackers access database backup and restore functions, exploit requires...

9.3CVSS5.3AI score0.04194EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.16 views

WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)

Pre-authentication reflected XSS in WordPress wp-login.php CVE-2026-64638. The flaw exploits a parser differential between PHP striptags and WordPress KSES. Tags with whitespace after e.g. " area" survive striptags but are normalized to valid HTML by KSES, leading to attacker-controlled DOM...

8.9CVSS8.2AI score0.00894EPSS
SaveExploits33References4
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.16 views

BMC FootPrints - Authentication Bypass

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability in the password reset functionality. Unauthenticated attackers can access the /footprints/servicedesk/passwordreset/request/ endpoint to obtain a valid SECTOKEN session cookie without proper...

9.1CVSS5.6AI score0.3436EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.70 views

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

9.8CVSS9AI score0.83622EPSS
SaveExploits5References4
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.281 views

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

7.5CVSS7.5AI score0.16389EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.120 views

Cobbler - Authentication Bypass

Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ and possibly even older versions, may be vulnerable to an authentication bypass vulnerability in XMLRPC API /cobblerapi that can result in privilege escalation, data manipulation or exfiltration, and LDAP credential harvesting...

9.8CVSS8.5AI score0.05462EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.97 views

Nacos <1.4.1 - Authentication Bypass

This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...

9.8CVSS9AI score0.69634EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.36 views

Intelbras NPLUG 1.0.0.14 - Authentication Bypass

Intelbras NPLUG 1.0.0.14 is vulnerable to authentication bypass through cookie manipulation. An attacker can bypass authentication by simply setting a cookie named "admin:". id: CVE-2018-12455 info: name: Intelbras NPLUG 1.0.0.14 - Authentication Bypass author: ritikchaddha severity: critical...

9.3CVSS8AI score0.03207EPSS
SaveExploits3References2
Rows per page
Query Builder