Pglombardo vulnerabilities

Products

• Passwordpusher 8

Newest

• pglombardo passwordpusher PasswordPusher before 2.11.1 Race Condition View Limit Bypass CVE-2026-87816 8.7 HighSeptember 9, 2026
• pglombardo passwordpusher PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison CVE-2026-62382 6.9 MediumAugust 22, 2026
• pglombardo passwordpusher PasswordPusher < 2.9.2 Passphrase Brute-Force via Unthrottled Endpoint CVE-2026-61458 8.7 HighJuly 13, 2026
• passwordpusher PasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push Payload CVE-2026-59802 6.3 MediumJuly 8, 2026
• apnotic password pusher, pglombardo passwordpusher +1 more Password Pusher: JSON API `/p.json` file upload alias bypasses file-push authentication CVE-2026-41308 6.5 MediumMay 8, 2026
• pglombardo passwordpusher Password Pusher Allows Session Token Interception Leading to Potential Hijacking CVE-2024-56733 5.7 MediumDecember 30, 2024
• pglombardo password pusher, passwordpusher +1 more Password Pusher's rate limiter can be bypassed by forging proxy headers CVE-2024-52796 Fix available 5.3 MediumNovember 20, 2024
• apnotic llc passwordpusher Cross-site Scripting (XSS) Vulnerability in PasswordPusher CVE-2024-51989 7.1 HighNovember 7, 2024