EUVD-2026-110667

Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932:...

CVE-2026-82116 Missing Authentication for Critical Function Vulnerability in HiRDB

Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932:...

CVE-2026-82116

This vulnerability affects HiRDB Server across multiple versions, including Version 10 (10-00 to 10-12-01), Version 9 (09-00 through 09-66-22), and several Version 9(32) and Additional Function variants. The root cause is a Missing Authentication for Critical Function (CWE-306), which could allow...

CVE-2026-76938

CVE-2026-76938 identifies an Authentication Bypass vulnerability (CWE-290) in JP1/Automatic Job Management System 3 - Manager affecting versions from 10-00 before 13-50-31. The vulnerability allows for unauthorized access, resulting in a CRITICAL base score of 9.8. It can be exploited over a NETW...

CVE-2026-76938 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31...

EUVD-2026-110658

Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31...

CVE-2026-107147 Authentication bypass by spoofing in twofactor_gauthenticator

The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...

CVE-2026-107147 Authentication bypass by spoofing in twofactor_gauthenticator

The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...

CVE-2026-107147

The twofactor_gauthenticator plugin for Roundcube is vulnerable to a 2FA authentication bypass due to a lack of validation for Client-IP and X-Forwarded-For headers. An attacker who possesses a user's password can spoof a whitelisted IP address to bypass the second factor. This issue was resolved...

CVE-2026-107147

The twofactorgauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the...

CVE-2026-92885

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

Exploit for CVE-2026-114509

CVE-2026-114509 Laravel TokenGuard authentication bypass thro...

Sensitive Information Disclosure

org.asynchttpclient, async-http-client is vulnerable to sensitive information disclosure. The vulnerability is due to improper handling of proxy authentication headers when using an authenticated SOCKS proxy, which allows an attacker-controlled origin to obtain proxy credentials, including Basic,...

CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

EUVD-2026-110640

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

CVE-2026-92885

The Qode Membership plugin for WordPress (versions up to and including 2.0.6.2 ) is vulnerable to an Authentication Bypass leading to Account Takeover . The root cause is a typographic error in the qode_membership_login_user_from_social_network function where the code checks an undefined variable...

CyberSecVulnerabilitiesDemo

CyberSec Vulnerabilities Demo Cybersecurity demonstrations fo...

hunt-for-cve-2018-10933

Hunt for and Exploit the libSSH Authentication Bypass CVE-2018-10933 Practical Guide explaining how to find hosts vulnerable to the libSSH Authentication Bypass CVE-2018-10933 and how to exploit them to gain shell access. Please refer to the following blog post for instructions:...

WordPress Qode Membership plugin <= 2.0.6.2 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by 0xwackydawg in WordPress Plugin Qode Membership versions = 2.0.6.2...