pglombardo PasswordPusher vulnerabilities
8 published CVEs name pglombardo PasswordPusher among the affected products.
- 8Published CVEs8 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126400
Password Pusher 1.49.0 before 2.17.0 IP Spoofing via Unanchored Trusted-Proxy Regex
pglombardo · PasswordPusher
Medium6.3 - CVE-2026-87816
PasswordPusher before 2.11.1 Race Condition View Limit Bypass
pglombardo · PasswordPusher
High8.7 - CVE-2026-62382
PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison
pglombardo · PasswordPusher
Medium6.9 - CVE-2026-61458
PasswordPusher < 2.9.2 Passphrase Brute-Force via Unthrottled Endpoint
pglombardo · PasswordPusher
High8.7 - CVE-2026-41308
Password Pusher: JSON API `/p.json` file upload alias bypasses file-push authentication
pglombardo · PasswordPusher
Medium6.5 - CVE-2024-56733
Password Pusher Allows Session Token Interception Leading to Potential Hijacking
pglombardo · PasswordPusher
Medium5.7 - CVE-2024-52796
Password Pusher's rate limiter can be bypassed by forging proxy headers
pglombardo · PasswordPusher
Medium5.3 - CVE-2024-51989
Cross-site Scripting (XSS) Vulnerability in PasswordPusher
pglombardo · PasswordPusher
High7.1