Atlassian Questions For Confluence - Hardcoded Credentials

Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When installing versions 2.7.34, 2.7.35, and 3.0.2, a Confluence user account is created in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attack...

CVE-2026-93616_Checks

설치 compromise-check.sh를 Check Point Management 서버로 이동 chmod +x compromise-check.sh 셸 스크립트 Check Point 관리 서버의 Expert 모드에서 compromise-check.sh가 있는 디렉터리에서 다음 명령을 실행하십시오. SmartDashboard 스크립트 smartdashboardrunscript.sh는 SmartDashboard에서 manager로 이동하여 run script를 클릭한 후 이 코드를 붙여넣으면 간단히 실행할 수 있습니다. 설명 추가...

Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207

This module enables you to add an extra layer of verification for user login flow. The Two Factor Authentication - TFA / Passwordless Login module for Drupal contains a vulnerability in the headless login endpoint that can disclose the site's stored miniOrange customer API key to unauthenticated...

PT-2026-107759

This module enables you to add an extra layer of verification for user login flow. The Two Factor Authentication - TFA / Passwordless Login module for Drupal contains a vulnerability in the headless login endpoint that can disclose the site's stored miniOrange customer API key to unauthenticated...

PT-2026-107567

MISP contains a race condition in the email-based one-time password OTP login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store,...

Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201

This module provides TOTP-based two-factor authentication 2FA for Drupal, with an optional setting to enforce 2FA for all users site-wide. The module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on...

Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197

This module provides TOTP-based two-factor authentication 2FA for Drupal. The module doesn't enforce the second factor when a user logs in with Drupal core's one-time login link. This vulnerability is mitigated by the fact that an attacker must have access to a valid one-time login link for a...

PT-2026-107747

This module provides TOTP-based two-factor authentication 2FA for Drupal. The module doesn't enforce the second factor when a user logs in with Drupal core's one-time login link. This vulnerability is mitigated by the fact that an attacker must have access to a valid one-time login link for a...

PT-2026-107509

wger is a free, open-source workout and fitness manager. Prior to version 2.6, the trainer login view in wger accepts GET requests and executes django login without any CSRF protection, because Django's CsrfViewMiddleware only enforces tokens on unsafe methods POST/PUT/PATCH/DELETE. An attacker c...

PT-2026-107388

Name of the Vulnerable Software and Affected Versions wolfSSH versions 1.4.15 through 1.5.0 Description In the Windows port of wolfSSHd, the Windows logon token acquired during password or public key authentication is not released before a token is acquired for a subsequent connection. This leads...

PT-2026-107513

Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "login type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the user account property is required; however, a user can view the email...

PT-2026-107566

Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...

SOC335-CVE-2024-49138-Exploitation-Detected

SOC335 - Exploitation of CVE-2024-49138 Detected Summary This was one of the SOC lab exercises that I took on LetsDefend. The alert was about CVE-2024-49138. I investigated the alert, checked a suspicious hash on VirusTotal and searched the available logs for related activity. What I Did...

CVE-2025-505050

CVE-2025- Des: 업로드된 파일에 대한 인증되지 않은 접근 POC: 업로드된 파일로 이동하면 로그인 없이 접근할 수 있습니다. 발견자: Aljohara Abdulmohsen Alsubaie...

CVE-2026-101151

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process...

CVE-2026-101151 Security Advisory 0187

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process...

CVE-2026-101151 Security Advisory 0187

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process...

EUVD-2026-93947

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process...

CVE-2026-101151

Insufficient validation of requests within the login flow allows a remote, unauthenticated attacker to craft a malicious URL. When a user clicks this link, they may be redirected to an arbitrary external site upon completing the authentication process. This vulnerability is associated with CWE-60...

EUVD-2026-93779

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...