pglombardo

Products

ProductCVEsExploitedLatest
PasswordPusher7–Sep 9, 2026

Exploited and recent CVEs

  • CVE-2026-87816 High 7.5 PasswordPusher before 2.11.1 Race Condition View Limit Bypass 0.4%
  • CVE-2026-62382 Medium 6.9 PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison 1.2%
  • CVE-2026-61458 High 7.5 PasswordPusher < 2.9.2 Passphrase Brute-Force via Unthrottled Endpoint 0.4%
  • CVE-2026-41308 Medium 6.5 Password Pusher: JSON API `/p.json` file upload alias bypasses file-push authentication 0.3%
  • CVE-2024-56733 Medium 5.7 Password Pusher Allows Session Token Interception Leading to Potential Hijacking 0.2%
  • CVE-2024-52796 Medium 5.3 Password Pusher's rate limiter can be bypassed by forging proxy headers 0.5%
  • CVE-2024-51989 High 7.1 Cross-site Scripting (XSS) Vulnerability in PasswordPusher 0.4%