Vulnerabilities
How Skipping One Header Grants Full Admin Access in Wukong_HRM
A critical flaw in Wukong_HRM lets attackers bypass authentication entirely, gaining full control over employee data and HR records without credentials.
Authentication Bypass
Everything Sandbox Gazette has reported about Authentication Bypass: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
How a Broken Preview Link in TinaCMS Lets Hackers Steal Editor Access
A critical flaw in TinaCMS versions prior to 3.14.0 allows attackers to hijack admin sessions through manipulated preview links, granting full content control.
Vulnerabilities
How can WPCOM Member flaws let hackers log in as admins using social IDs?
The WPCOM Member plugin for WordPress allows unauthenticated attackers to impersonate any user, including administrators, by bypassing security controls in versions up to 1.7.27.