CVE-2026-110883

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

CVE-2026-110883 WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

EUVD-2026-103427

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

CVE-2026-110883

The VideoWhisper.com 2Way VideoCalls and Random Chat WordPress plugin (webcam-2way-videochat) is vulnerable to a Broken Authentication issue (CWE-305) in versions up to and including 6.1.5 . This primary weakness allows for Authentication Abuse , potentially enabling unauthorized access to the ap...

EUVD-2026-91068

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71448

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71448

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71448

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-71448

The Johnson Controls EasyIO FS32 (versions before 3.0b63 ) is susceptible to an Insecure Default Initialization of Resource vulnerability (CWE-1188). This security flaw allows for Authentication Abuse . The documents do not provide specific technical details regarding the root cause, exploit vect...

PT-2026-104022

Name of the Vulnerable Software and Affected Versions Johnson Controls EasyIO FS32 versions prior to 3.0b63 Description An insecure default initialization of resource allows for authentication abuse. Recommendations Update Johnson Controls EasyIO FS32 to version 3.0b63 or later...

CVE-2026-71448: Initialization of a Resource with an Insecure Default

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-15580

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...

EUVD-2026-63972

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...

CVE-2026-15580 PassPortal browser extension: vault token disclosure via unvalidated postMessage

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...

CVE-2026-15580

N-able PassPortal browser extension (Chrome and Edge) is vulnerable to vault token disclosure via an unvalidated postMessage handler. Any site or iframe presented to the user could gain complete, persisted access to the decrypted vault for up to 100 days, enabling authentication abuse. The issue ...

CVE-2026-15580: Missing Origin Validation in WebSockets

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...

Exploit for CVE-2026-20896

CVE-2026-20896 Lab This repository provides a small, self-con...

CVE-2026-47159

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO discovery and pre-validation flow returned organization-related SSO metadata including organizationIdentifier values for arbitrary email addresses and allowed a valid pre-validation JWT to be obtained...

PT-2026-60202

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO discovery and pre-validation flow returned organization-related SSO metadata including organizationIdentifier values for arbitrary email addresses and allowed a valid pre-validation JWT to be obtained...

CVE-2026-57698

Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentication Abuse.This issue affects Abandoned Cart Recovery for WooCommerce: from n/a through = 1.1.12...