2870 matches found
CVE-2026-34486-poc
CVE-2026-34486 Vulnerabilidad de Omisión de EncryptInterceptor en Apache Tomcat - Reproducción 1. Resumen de la Vulnerabilidad Atributo| Detalles ---|--- ID de CVE| CVE-2026-34486 Gravedad| Importante / Alta CVSS 3.1: 7.5 Tipo de vulnerabilidad| CWE-311 Falta de cifrado de datos sensibles /...
CVE-2026-103347 WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...
CVE-2026-103347
The hCaptcha for WP plugin for WordPress (versions
CVE-2025-55182-bypass
CVE-2025-55182-bypass CVE-2025-55182-bypass-waf...
WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by MYUNGYONG LEE in WordPress Plugin Paid Member Subscriptions versions = 3.0.9...
JFrog Artifactory 6.7.3 - Admin Login Bypass
JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...
Flowise 1.6.5 - Authentication Bypass
The flowise version = 1.6.5 is vulnerable to authentication bypass vulnerability. id: CVE-2024-31621 info: name: Flowise 1.6.5 - Authentication Bypass author: DhiyaneshDK severity: high description: | The flowise version = 1.6.5 is vulnerable to authentication bypass vulnerability. impact: |...
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin All In One WP Security & Firewall versions = 5.4.8...
CVE-2026-95523 WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
Subscriber Bypass Vulnerability in WP User Frontend = 4.3.11 versions...
CVE-2026-95524 WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WP User Frontend = 4.3.11 versions...
CVE-2026-95514 WordPress Netgsm plugin <= 2.10.0 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Netgsm = 2.10.0 versions...
CVE-2026-95514 WordPress Netgsm plugin <= 2.10.0 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Netgsm = 2.10.0 versions...
CVE-2026-94457 WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Captcha Code = 3.32 versions...
CVE-2026-94457 WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Captcha Code = 3.32 versions...
WordPress Netgsm plugin <= 2.10.0 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Eyüphan Şahin in WordPress Plugin Netgsm versions = 2.10.0...
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP User Frontend versions = 4.3.11...
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP User Frontend versions = 4.3.11...
WordPress Captcha Code plugin <= 3.32 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by KLg in WordPress Plugin Captcha Code versions = 3.32...
EUVD-2026-78806
FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...