Lucene search
+L

1139 matches found

NVD
NVD
added 2025/08/20 8:15 a.m.10 views

CVE-2025-54713

Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through = 1.3.0...

9.8CVSS0.00561EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 8:02 a.m.37 views

CVE-2025-54713

CVE-2025-54713 : Affected product is WordPress Taxi Booking Manager for WooCommerce (versions through 1.3.0). The entry describes an authentication bypass via an alternate path/channel that enables authentication abuse for the plugin. Affected component is the authentication mechanism; root cause...

9.8CVSS5.9AI score0.00561EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:02 a.m.4 views

CVE-2025-54713 WordPress Taxi Booking Manager for WooCommerce plugin <= 1.3.0 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through = 1.3.0...

9.8CVSS5.2AI score0.00561EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.13 views

PT-2025-34021 · WordPress · Taxi Booking Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: Taxi Booking Manager for WooCommerce versions through 1.3.0 Description: An authentication bypass vulnerability exists due to an alternate path or channel, allowing authentication abuse. Recommendations: At the moment, there is no information...

9.8CVSS6.5AI score0.00561EPSS
SaveExploits0References6
Schneier on Security
Schneier on Security
added 2025/08/19 11:07 a.m.10 views

Zero-Day Exploit in WinRAR File

A zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups: The vulnerability seemed to have super Windows powers. It abused alternate data streams, a Windows feature that allows different ways of representing the same file path. The exploit abused that feature ...

7.4AI score
SaveExploits0
Snyk
Snyk
added 2025/08/18 6:30 p.m.10 views

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the login process when multi-factor authentication is enabled. An attacker can gain unauthorized access by submitting valid credentials and changing the HTTP method from POST ...

5.1CVSS7AI score0.00503EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/17 5:25 p.m.39 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS7.3AI score0.00523EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/08/17 6:31 a.m.147 views

Exploit for Path Traversal in Rarlab Winrar

PoC for CVE-2025-8088: Path Traversal in WinRAR Vulnerabil...

8.8CVSS7.3AI score0.94051EPSS
SaveExploits35
GithubExploit
GithubExploit
added 2025/08/15 8:03 p.m.221 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Path Traversal Exploit PoC !PoC Demo...

8.8CVSS7.3AI score0.94051EPSS
SaveExploits35
NVD
NVD
added 2025/08/15 5:15 p.m.17 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS0.00523EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/15 4:27 p.m.41 views

CVE-2025-8995

CVE-2025-8995: Drupal Authenticator Login contains an authentication bypass vulnerability in versions prior to 2.1.4. The issue arises in the Authenticator Login module (Drupal) where an alternate path or channel can bypass authentication, effectively allowing login as a user without proper crede...

9.8CVSS6.6AI score0.00523EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/15 4:27 p.m.5 views

CVE-2025-8995 Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

6.6AI score0.00523EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/08/15 4:27 p.m.5 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/15 4:27 p.m.10 views

CVE-2025-8995 Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS5.9AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-49125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root...

7.5CVSS7AI score0.03437EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/08/14 12:36 a.m.276 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Exploit Advanced WinRAR Path Traver...

8.8CVSS7.7AI score0.94051EPSS
SaveExploits35
GithubExploit
GithubExploit
added 2025/08/13 11:05 a.m.479 views

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Proof of Concept PoC-Exploit !PoCht...

8.8CVSS7.1AI score0.94051EPSS
SaveExploits35
VulnCheck KEV
VulnCheck KEV
added 2025/08/12 12:00 a.m.12 views

VulnCheck KEV: CVE-2023-39265

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

6.5CVSS5.7AI score0.86203EPSS
SaveIn wildExploits2References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-5173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic possibly under influence of a local unprivileged...

7.5CVSS7.1AI score0.00739EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/09 5:29 p.m.14 views

CVE-2025-24000

Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through = 3.2.0...

8.8CVSS6AI score0.00595EPSS
SaveExploits1References1
Rows per page
Query Builder