Lucene search
+L

631 matches found

Snyk
Snyk
•added 2026/07/07 8:55 p.m.•22 views

Authentication Bypass Using an Alternate Path or Channel

Overview @better-auth/core is a The most comprehensive authentication framework for TypeScript. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the handleOAuthUserInfo. An attacker can gain unauthorized access to user accounts by...

8.3CVSS5.7AI score0.00289EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/07 8:55 p.m.•16 views

Authentication Bypass Using an Alternate Path or Channel

Overview better-auth is a The most comprehensive authentication library for TypeScript. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the handleOAuthUserInfo. An attacker can gain unauthorized access to user accounts by...

8.3CVSS5.7AI score0.00289EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/06/26 6:30 a.m.•113 views

Exploit for Authentication Bypass Using an Alternate Path or Channel in Nvidia Triton_Inference_Server

CVE-2026-24207 / 24206 — NVIDIA Triton Inference Server SageMa...

9.8CVSS6AI score0.02552EPSS
SaveExploits4
Redos
Redos
•added 2026/06/26 12:00 a.m.•11 views

ROS-20260626-73-0008

Vulnerability of the DOM component: The security of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relies on bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

9.8CVSS8.5AI score0.00525EPSS
SaveExploits0
NVD
NVD
•added 2026/06/17 2:17 p.m.•38 views

CVE-2026-54817

Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation. This issue affects MStore API: from n/a through 4.18.4...

6.5CVSS0.00456EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/17 1:36 p.m.•29 views

EUVD-2026-37706

Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation. This issue affects MStore API: from n/a through 4.18.4...

6.5CVSS5.2AI score0.00456EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/17 1:36 p.m.•22 views

CVE-2026-54817 WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation. This issue affects MStore API: from n/a through 4.18.4...

6.5CVSS5.8AI score0.00456EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•43 views

PT-2026-50422

Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recovery Exploitation. This issue affects MStore API: from n/a through 4.18.4...

6.5CVSS5.2AI score0.00456EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/06/16 7:02 p.m.•12 views

Authentication Bypass Using an Alternate Path or Channel

Overview github.com/traefik/traefik/v2/pkg/server is a server package for traefik, a cloud native edge router. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the SNICheck process. An attacker can gain unauthorized access to protecte...

10CVSS5.9AI score0.00357EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/06/16 7:02 p.m.•16 views

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the SNICheck process. An attacker can gain unauthorized access to protected backends by completing a TLS handshake using a permissive SNI and then sending an HTTP Host header...

10CVSS5.9AI score0.00357EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/06/16 7:02 p.m.•12 views

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the SNICheck process. An attacker can gain unauthorized access to protected backends by completing a TLS handshake using a permissive SNI and then sending an HTTP Host header...

10CVSS5.9AI score0.00357EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/06/16 7:02 p.m.•15 views

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the SNICheck process. An attacker can gain unauthorized access to protected backends by completing a TLS handshake using a permissive SNI and then sending an HTTP Host header...

10CVSS5.9AI score0.00357EPSS
SaveExploits1References2
NVD
NVD
•added 2026/06/15 2:16 p.m.•52 views

CVE-2026-49062

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7...

8.8CVSS0.00556EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/15 12:51 p.m.•27 views

EUVD-2026-36721

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7...

8.8CVSS5.2AI score0.00556EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/15 12:51 p.m.•46 views

CVE-2026-49062

CVE-2026-49062 concerns the WordPress plugin Faust.js (faustwp)

8.8CVSS5.8AI score0.00556EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•52 views

PT-2026-49228

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7...

8.8CVSS5.2AI score0.00556EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/06/13 5:04 p.m.•234 views

Exploit for Authentication Bypass Using an Alternate Path or Channel in Gitlab

CVE-2025-4524...

9.8CVSS7.4AI score0.10556EPSS
SaveExploits8
Snyk
Snyk
•added 2026/06/11 1:26 p.m.•13 views

Authentication Bypass Using an Alternate Path or Channel

Overview github.com/traefik/traefik/v2/pkg/server is a server package for traefik, a cloud native edge router. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the StripPrefix process. An attacker can access protected backend endpoint...

10CVSS8.1AI score0.00775EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:41 p.m.•27 views

CVE-2025-41273

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to bypass authentication of the Console web application and...

9.8CVSS5.9AI score0.00407EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:33 p.m.•27 views

CVE-2026-45217

Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Gateway for WooCommerce: from n/a through 5.0.7...

6.5CVSS5.8AI score0.00456EPSS
SaveExploits0References1
Rows per page
Query Builder