CVE-2026-2092 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-2092 vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak, request-9047-keycloak-fips...

CVE-2026-2092

creationtimestamp| type| source ---|---|--- 2026-03-18 02:45:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhchte54ry2f...

CVE-2026-2092

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

EUVD-2019-2092

Malware in sbrugna...

CVE-2025-2092

creationtimestamp| type| source ---|---|--- 2025-04-22 15:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxbpeqrl2c 2025-04-22 16:43:55+00:00| seen| https://t.me/cvedetector/23515 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11...

CVE-2025-2092

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

CVE-2025-2092 Remote site authentication secrets written to web log

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

CVE-2025-2092

Checkmk CVE-2025-2092 affects Checkmk versions <2.3.0p29, <2.2.0p41 and

CVE-2024-2092

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Twitter Widget in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-2092 Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget

The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Twitter Widget in all versions up to, and including, 1.13.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2013-2092

creationtimestamp| type| source ---|---|--- 2024-02-23 21:46:31+00:00| seen| https://t.me/ctinow/192191...

Rocky Linux 8 : bind (RLSA-2022:2092)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:2092 advisory. - In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as well as release...

Huawei EulerOS: Security Advisory for pixman (EulerOS-SA-2023-2092)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2092

creationtimestamp| type| source ---|---|--- 2023-04-15 14:39:48+00:00| seen| https://t.me/cibsecurity/62221 2023-11-25 01:25:46+00:00| seen| https://t.me/arpsyndicate/559 2023-12-10 12:26:55+00:00| seen| https://t.me/arpsyndicate/1617...

CVE-2023-2092

CVE-2023-2092 affects SourceCodester Vehicle Service Management System 1.0. The vulnerability is a SQL injection in the file view_service.php triggered by manipulating the id parameter. Descriptions across sources indicate remote exploitability and public disclosure. Some connected sources reiter...

CVE-2022-2092

creationtimestamp| type| source ---|---|--- 2022-07-11 16:19:31+00:00| seen| https://t.me/cibsecurity/45920...

CVE-2022-2092 WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks...

CVE-2022-2092

CVE-2022-2092 affects the WooCommerce PDF Invoices & Packing Slips WordPress plugin prior to 2.16.0. The setting page fails to escape a user-supplied parameter, enabling reflected cross-site scripting attacks. Affected product is the WordPress plugin; root cause is lack of proper input escaping o...

AlmaLinux 8 : bind (ALSA-2022:2092)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:2092 advisory. - In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as well as release...