2890 matches found
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
JFrog Artifactory 6.7.3 - Admin Login Bypass
JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...
Flowise 1.6.5 - Authentication Bypass
The flowise version = 1.6.5 is vulnerable to authentication bypass vulnerability. id: CVE-2024-31621 info: name: Flowise 1.6.5 - Authentication Bypass author: DhiyaneshDK severity: high description: | The flowise version = 1.6.5 is vulnerable to authentication bypass vulnerability. impact: |...
CVE-2026-97308 WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Login Lockdown = 2.17 versions...
CVE-2026-39772 WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft = 5.2.8 versions...
WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Captcha by BestWebSoft versions = 5.2.8...
CVE-2025-55182-bypass
CVE-2025-55182-bypass CVE-2025-55182-bypass-waf...
WordPress Zero Spam plugin <= 5.7.11 - Bypass vulnerability vulnerability
Bypass vulnerability vulnerability discovered by Peter Tang in WordPress Plugin Zero Spam versions = 5.7.11...
WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Login Lockdown versions = 2.17...
WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by dcs in WordPress Plugin BuildKit – Product Builder for WooCommerce – Custom PC Builder versions = 1.0.28...
EUVD-2026-44819
Anubis: Policy bypass via client controlled X-Original-URI header...
CVE-2026-34486-poc
CVE-2026-34486 Apache Tomcat EncryptInterceptor Bypass Vulnerability Reproduction 1. Vulnerability Overview Attribute| Details ---|--- CVE ID| CVE-2026-34486 Severity| Important / High CVSS 3.1: 7.5 Vulnerability Type| CWE-311 Missing Encryption of Sensitive Data / CWE-807 Reliance on Untrusted...
CVE-2026-103347 WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in hCaptcha for WP = 5.3.0 versions...
CVE-2026-103347
The hCaptcha for WP plugin for WordPress (versions
WordPress hCaptcha for WP plugin <= 5.3.0 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by bamper1 in WordPress Plugin hCaptcha for WP versions = 5.3.0...
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
Bypass vulnerability vulnerability discovered by rpgsec in WordPress Plugin OAuth Single Sign On – SSO OAuth Client versions = 7.1.2...
WordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by MYUNGYONG LEE in WordPress Plugin Paid Member Subscriptions versions = 3.0.9...
WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin All In One WP Security & Firewall versions = 5.4.8...