DEBIAN-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

UBUNTU-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

sql-injection-labs

SQL Injection Labs — PortSwigger Web Security Academy A colle...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

EUVD-2026-86517

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

The django-allauth library, in versions before 65.19.4 , contains a vulnerability where failed login attempt limits are not properly enforced. In certain common configurations, an attacker can exploit the way the system handles diacritics (such as accents) to bypass these limits, allowing for a h...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

PT-2026-99092

Name of the Vulnerable Software and Affected Versions X-SpringBoot versions prior to 6.0 Description Unauthenticated endpoints return login verification codes directly in HTTP responses without sending them to the account owners. An attacker can request these codes using a known mobile number or...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

PT-2026-98353

Name of the Vulnerable Software and Affected Versions django-allauth versions prior to 65.19.4 Description In certain common configurations, the software fails to enforce expected limits on failed login attempts. An attacker can bypass these restrictions by leveraging the handling of diacritics,...

CVE-2026-97063: Improper Authentication

X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET /sys/email/code without sending them to account owners. Attackers can request codes using known mobile numbers or email addresses, read them from responses, and...

CVE-2026-84461: Observable Discrepancy

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the two-factor login step let an attacker try unlimited password guesses for any account without triggering Zammad's normal lockout or rate limiting. The response also revealed whether a guess was correct, even...

PT-2026-99133

Name of the Vulnerable Software and Affected Versions Flame versions prior to 2.4.1 Description An insufficient session expiration issue exists in the login endpoint. Attackers with former administrator access can obtain tokens with arbitrary lifespans by providing unvalidated duration parameters...

Linux Distros Unpatched Vulnerability : CVE-2026-57177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state during the...

Linux Distros Unpatched Vulnerability : CVE-2026-97764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the...

PT-2026-98893

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.2.0 through 4.2.7 RabbitMQ versions 4.3.0 through 4.3.1 Description A successful request to the 'POST /login' endpoint causes the is authorized/2 function to set an authentication cookie containing base64-encoded username a...

PT-2026-99087

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description Zammad is a web-based open source helpdesk and customer support system. A flaw in the two-factor login process allows an attacker to perform unlimited password guesses for any account. This occurs...

Linux Distros Unpatched Vulnerability : CVE-2026-67236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, a successful POST /login caused isauthorized/2 to set an auth cookie containing...