Skip to content
OpenAdvisories

Vendor

pglombardo

8 known vulnerabilities.

Products

PasswordPusher 8
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-87816

    PasswordPusher before 2.11.1 Race Condition View Limit Bypass

    PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire_after_views limits. Attackers can send concurrent requests to the show endpoint to access one-…

    pglombardo PasswordPusher
  • High 7.5
    CVE-2026-61458

    PasswordPusher < 2.9.2 Passphrase Brute-Force via Unthrottled Endpoint

    PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms. Attackers who know a push token can systematically guess passphrases at 120 attempt…

    pglombardo PasswordPusher
  • High 7.1
    CVE-2024-51989

    Cross-site Scripting (XSS) Vulnerability in PasswordPusher

    Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability was identified in the PasswordPusher application, affecting versions `v1.41.1` through and including `v.1.48.0`. The is…

    pglombardo PasswordPusher