Vulnerabilities
Eptura Archibus Auth Bypass and RCE Vulnerabilities Grant Unauthenticated Database Access
Rapid7 found three vulnerabilities in Eptura Archibus allowing unauthenticated remote code execution and full database access.
Authentication Bypass
Everything RedTeam Log has reported about Authentication Bypass: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Misaka Danmu Server Authentication Bypass Grants Full Admin Control
Unauthenticated users can manipulate configuration keys to assume administrator privileges in Misaka Danmu Server versions up to 2.8.9.
Vulnerabilities
nullclaw NullHub Auth Bypass Exposes Agent Control to Unauthenticated Users
A critical flaw in nullclaw NullHub allows attackers to rewrite agent configurations and credentials without any authentication, affecting versions up to 2026.5.29.
Vulnerabilities
Znuny header trust flaw grants admin access without passwords
Attackers can impersonate any user, including administrators, in Znuny versions prior to 7.3.7 by forging a single HTTP request header.
Vulnerabilities
vlife Critical CVE-2026-110612: Hardcoded Signing Key Enables Token Forgery and Full System Control
A hardcoded signing key in vlife allows attackers to forge tokens and gain full system control without valid credentials.
Vulnerabilities
Metasploit Framework Auth Bypass CVE-2026-87689 Lets Unauthenticated Users Delete Credentials
A critical flaw in Metasploit Framework allows anyone with network access to read or delete stored credentials without logging in.