8 matches found
EUVD-2024-54891
Malicious code in bioql PyPI...
EUVD-2024-54898
Malicious code in bioql PyPI...
CVE-2024-50645
CVE-2024-50645 involves MallChat v1.0-SNAPSHOT with an authentication bypass that lets attackers access the API without a token. The vulnerability affects the API authentication mechanism and enables unauthorized API access with high impact (confidentiality, integrity, availability all rated high...
CVE-2024-50644
zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any token...
CVE-2024-50641
An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnerability to access API without any token...
CVE-2024-57155
The CVE CVE-2024-57155 affects Radar v1.0.8 and is caused by improper access control that lets unauthenticated users bypass authentication to reach sensitive API endpoints. This is described across multiple sources (NVD/Red Hat/CIRCL entries referencing radar 1.0.8). Impact: high confidentiality,...
CVE-2025-50904
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 2025-06-11. An attacker can exploit this vulnerability to access /admin/ API without any token...
PT-2025-34156 · Radar · Radar
Name of the Vulnerable Software and Affected Versions: radar version 1.0.8 Description: Incorrect access control in radar version 1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token. The issue enables unauthorized access to sensitive API endpoints...