Lucene search
K

10 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.2 views

WordPress JetFormBuilder plugin <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation vulnerability

Missing Authorization to Unauthenticated Form Generation vulnerability discovered by Tri Firdyanto Firdy - ZeroByte in WordPress Plugin JetFormBuilder versions = 3.5.3...

5.3CVSS5.9AI score0.00119EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/18 11:36 p.m.1 views

CVE-2025-68435

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS7AI score0.00088EPSS
Exploits0References1
NVD
NVD
added 2025/12/17 11:16 p.m.1 views

CVE-2025-68435

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS0.00088EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/17 11:10 p.m.2 views

CVE-2025-68435 Zerobyte has Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS6.7AI score0.00088EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/17 11:10 p.m.16 views

CVE-2025-68435 Zerobyte has Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS0.00088EPSS
Exploits0References3
OSV
OSV
added 2025/12/17 11:10 p.m.0 views

CVE-2025-68435 Zerobyte has Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS7AI score0.00088EPSS
Exploits0References5
CVE
CVE
added 2025/12/17 11:10 p.m.11 views

CVE-2025-68435

Zerobyte (backup automation tool) has an authentication bypass vulnerability affecting versions prior to 0.18.5 and 0.19.0, where authentication middleware is not properly applied to API endpoints, allowing access without valid session credentials. This exposure is risky for deployments exposed o...

9.1CVSS6.7AI score0.00088EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2025/12/17 11:10 p.m.2 views

EUVD-2025-204006

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS6.5AI score0.00088EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.1 views

PT-2025-51980

Name of the Vulnerable Software and Affected Versions Zerobyte versions prior to 0.18.5 Zerobyte versions prior to 0.19.0 Description Zerobyte, a backup automation tool, has an issue where authentication middleware is not correctly applied to certain API endpoints. This allows access to these...

9.1CVSS6.9AI score0.00088EPSS
Exploits0References11
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.1 views

Zerobyte 安全漏洞

Zerobyte is a hosting automated backup software by Nico Personal Developers. A security vulnerability exists in Zerobyte versions prior to 0.18.5 and prior to 0.19.0, which stems from the authentication middleware not being properly applied to API endpoints, potentially leading to authentication...

9.1CVSS6.7AI score0.00088EPSS
Exploits0References4
Rows per page
Query Builder