Tag
Authorization Bypass in Flowise openai-realtime Endpoints
1 CVEFlowise versions prior to 3.1.4 contain an authorization flaw in the openai-realtime endpoint, enabling authenticated users to access and execute tools in unauthorized workspaces via cross-workspace ID manipulation.
ZITADEL Privilege Escalation via OAuth2 Token Exchange
1 TTP 1 CVEA vulnerability in ZITADEL's OAuth2 Token Exchange endpoint (CVE-2026-56668) allows authenticated users to exchange low-privilege tokens for highly privileged tokens by bypassing authorization and scope validation checks.
Authorization Bypass in Shopper Framework CollectionProducts Component
2 TTPsAn authorization bypass vulnerability in the Shopper framework allows authenticated users with limited privileges to perform unauthorized product deletions across any collection in the database.
Traefik HTTP/3 Backend Authentication Bypass via Connection Reuse
1 rule 2 TTPs 1 CVETraefik fails to isolate connection-bound NTLM and Negotiate authentication on HTTP/3 routes, allowing unrelated clients to inherit victim-authenticated backend connections.
Unauthenticated Access to ESPHome Dashboard via Ingress Interface Misconfiguration
2 TTPsAn auth bypass in the ESPHome Home Assistant add-on allows unauthenticated LAN access to the dashboard due to improper interface binding, enabling remote code execution on the host.
Unauthenticated Category Addition in Rizwan17 inventory-management-system
1 rule 1 TTP 1 CVEAn authentication bypass vulnerability in the AJAX backend of Rizwan17 inventory-management-system allows remote attackers to execute unauthorized category additions via the userid parameter.
Information Disclosure in SiYuan Kernel Enabling Offline Password Cracking
4 rules 8 TTPs 1 CVEAn information disclosure vulnerability in SiYuan's API allows unauthorized remote readers to retrieve cryptographic material necessary for offline, unthrottled GPU-based cracking of encrypted notebook master passwords.
NoSQL Injection Vulnerability in Budibase MongoDB Integration
1 rule 3 TTPs 5 CVEsBudibase versions prior to 3.40.0 are vulnerable to NoSQL injection in the MongoDB datasource due to improper handling of user-supplied parameters, allowing unauthorized data access and potential server-side execution.
Authorization Bypass in AI Copilot - Content Generator WordPress Plugin
1 rule 2 TTPs 1 CVEAn authorization bypass vulnerability in the AI Copilot - Content Generator WordPress plugin allows unauthenticated attackers to create administrator accounts and achieve full site takeover via malformed workflow execution.
Authorization Bypass in Red Hat Quay
1 TTP 1 CVEAn incorrect authorization vulnerability in Red Hat Quay allows read-only superusers to view and impersonate robot account tokens, potentially leading to unauthorized repository access.
Zitadel User API Verification Code Disclosure Vulnerability
1 TTP 1 CVEAn improper permission check in Zitadel's user API allows authenticated users to retrieve verification codes for arbitrary contact information, facilitating unauthorized verification of email addresses and phone numbers.
Rclone Unauthenticated options/set Allows Runtime Auth Bypass
2 rules 3 TTPsRclone is vulnerable to an unauthenticated options/set vulnerability that allows runtime authentication bypass, potentially leading to sensitive operations and command execution by setting `rc.NoAuth=true` on reachable RC servers started without global HTTP authentication.
GitLab MCP Server Unauthenticated Access via SSE Transport
2 rules 2 TTPsThe @yoda.digital/gitlab-mcp-server's SSE transport lacks authentication and uses wildcard CORS, enabling unauthenticated attackers to execute arbitrary GitLab API calls using the operator's GitLab PAT, including destructive operations.