Lucene search
+L

11 matches found

Patchstack
Patchstack
•added 2025/12/31 12:00 a.m.•21 views

WordPress JetFormBuilder plugin <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation vulnerability

Missing Authorization to Unauthenticated Form Generation vulnerability discovered by Tri Firdyanto Firdy - ZeroByte in WordPress Plugin JetFormBuilder versions = 3.5.3...

5.3CVSS5.9AI score0.00224EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/18 11:36 p.m.•14 views

CVE-2025-68435

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS7AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/17 11:16 p.m.•12 views

CVE-2025-68435

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS0.00412EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/17 11:10 p.m.•16 views

EUVD-2025-204006

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS6.5AI score0.00412EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/17 11:10 p.m.•8 views

CVE-2025-68435 Zerobyte has Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS5.6AI score0.00412EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/17 11:10 p.m.•29 views

CVE-2025-68435

Zerobyte (backup automation tool) has an authentication bypass vulnerability affecting versions prior to 0.18.5 and 0.19.0, where authentication middleware is not properly applied to API endpoints, allowing access without valid session credentials. This exposure is risky for deployments exposed o...

9.1CVSS5.6AI score0.00412EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/12/17 11:10 p.m.•11 views

CVE-2025-68435 Zerobyte has Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS7AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/12/17 11:10 p.m.•34 views

CVE-2025-68435 Zerobyte has Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS0.00412EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•15 views

Zerobyte 安全漏洞

Zerobyte is a hosting automated backup software by Nico Personal Developers. A security vulnerability exists in Zerobyte versions prior to 0.18.5 and prior to 0.19.0, which stems from the authentication middleware not being properly applied to API endpoints, potentially leading to authentication...

9.1CVSS6.7AI score0.00412EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/17 12:00 a.m.•14 views

PT-2025-51980

Name of the Vulnerable Software and Affected Versions Zerobyte versions prior to 0.18.5 Zerobyte versions prior to 0.19.0 Description Zerobyte, a backup automation tool, has an issue where authentication middleware is not correctly applied to certain API endpoints. This allows access to these...

9.1CVSS5.7AI score0.00412EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•2 views

CVE-2025-68435: Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS5.7AI score0.00412EPSS
SaveExploits0References1
Rows per page
Query Builder