Skip to contentPglombardo Passwordpusher vulnerabilities
- pglombardo passwordpusherPasswordPusher before 2.11.1 Race Condition View Limit BypassCVE-2026-878168.7 High
- pglombardo passwordpusherPasswordPusher before v2.9.6 Authentication Bypass via Null ComparisonCVE-2026-623826.9 Medium
- pglombardo passwordpusherPasswordPusher < 2.9.2 Passphrase Brute-Force via Unthrottled EndpointCVE-2026-614588.7 High
- passwordpusherPasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push PayloadCVE-2026-598026.3 Medium
- apnotic password pusher, pglombardo passwordpusher +1 morePassword Pusher: JSON API `/p.json` file upload alias bypasses file-push authenticationCVE-2026-413086.5 Medium
- pglombardo passwordpusherPassword Pusher Allows Session Token Interception Leading to Potential HijackingCVE-2024-567335.7 Medium
- pglombardo password pusher, passwordpusher +1 morePassword Pusher's rate limiter can be bypassed by forging proxy headersCVE-2024-52796Fix available5.3 Medium
- apnotic llc passwordpusherCross-site Scripting (XSS) Vulnerability in PasswordPusherCVE-2024-519897.1 High