VulnCheck

XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider

XenForo < 2.3.13 Refresh Token Replay via Expired Access Token

XenForo < 2.3.13 OAuth2 Authorization Code Reuse

XenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri Bypass

XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint

Typemill < 2.26.0 Authorization Bypass via Media File Download Route

Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints

Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter

Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint