348 matches found
CVE-2016-8776
CVE-2016-8776 frp bypass without account overwrite...
UNISOCUnlocker
UNISOCUnlocker Based of CVE-2022-38694 this adds a simple UI to remove the persist partition, commonly used for FRP IMPORTANT! Do not panic if the device appears to have a black screen. After the script is finished press the power button on the device. It should boot up normally after that. How 2...
CVE-2026-110619
frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frp...
EUVD-2026-101247
frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frp...
CVE-2026-110619
Versions frp 0.41.0 through 0.71.1 are vulnerable to a missing authentication flaw. The root cause is that pprof debug handlers are registered on the root mux outside of the Basic Authentication scope. This allows unauthenticated remote attackers to access /debug/pprof/ endpoints on frps dashboar...
CVE-2026-110619 frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpoints
frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frp...
CVE-2026-110619 frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpoints
frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frp...
CVE-2026-110619: Missing Authentication for Critical Function
frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frp...
frp
frp README | 中文文档 Patrocinadores frp es un proyecto de código abierto cuyo desarrollo continuo es posible gracias al apoyo de nuestros increíbles patrocinadores. Si deseas unirte a ellos, considera patrocinar el desarrollo de frp. Patrocinadores Oro El IDE completo diseñado para desarrolladores...
EUVD-2026-73989
In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28658
In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28658
A logic error in the findMetaAuthUid function of AccountsDb.java within the Framework component allows for a possible FRP bypass . This vulnerability could lead to a local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue is addressed i...
CVE-2026-28658
In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88227
Name of the Vulnerable Software and Affected Versions AccountsDb.java affected versions not specified Description A logic error exists in the findMetaAuthUid function within AccountsDb.java, which may allow a Factory Reset Protection FRP bypass. FRP is a security feature that prevents unauthorize...
CVE-2026-28658: Protection Mechanism Failure
In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
SUSE CVE-2026-73564
frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...
ASB-A-507575871
In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
frp v0.71.0
frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...
GO-2026-6103 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow in github.com/fatedier/frp
frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow in github.com/fatedier/frp...