Vulnerabilities
Why does a TLS setting break HAProxy API authentication globally?
A critical flaw in HAProxy Data Plane API allows unauthenticated access to management endpoints when specific TLS configurations are active.
authentication bypass
Everything Breach Observer has reported about authentication bypass: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
How does omitting username fields in POST /tvu/Login grant admin cookies on TVU pre-7.9?
TVU Networks confirms a critical authentication bypass in pre-7.9 firmware allows remote takeover via crafted login requests.
Vulnerabilities
Can Attackers Forge Tokens in fast-jwt 6.2.x by Bypassing Public Key Detection?
A flaw in the recent security update for fast-jwt allows attackers to forge tokens by bypassing public key detection, restoring a critical vulnerability.
