keycloak__keycloak_CVE-2022-4137_20-0-3

Keycloak Keycloak 是一款面向现代应用程序和服务的开源身份与访问管理解决方案。 此仓库包含 Keycloak 服务器、Java 适配器以及 JavaScript 适配器的源代码。 帮助与文档 文档 用户邮件列表 - 用于寻求帮助和询问 Keycloak 相关问题的邮件列表 报告安全漏洞 如果您发现了安全漏洞，请查阅如何正确报告漏洞的说明 报告问题 如果您认为发现了 Keycloak 中的缺陷，请开启一个 issue。 请记得提供清晰的摘要、描述以及复现该问题的步骤。 快速入门 要运行 Keycloak，请从我们的网站下载发行版。解压并运行： root@kitploit:...

keycloak__keycloak_CVE-2022-4361_21-1-1

Keycloak Keycloak 是一个面向现代应用和服务的开源身份与访问管理解决方案。 本仓库包含 Keycloak Server、Java 适配器和 JavaScript 适配器的源代码。 帮助与文档 文档 用户邮件列表 - 用于获取帮助和解答 Keycloak 相关一般问题的邮件列表 报告安全漏洞 如果您发现了安全漏洞，请查阅如何正确报告漏洞的说明 报告问题 如果您认为自己发现了 Keycloak 的缺陷，请提交一个 issue。请记得提供清晰的摘要、描述以及复现该问题的步骤。 快速开始 要运行 Keycloak，请从我们的网站下载发行版。解压后运行： root@kitploit...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

keycloak__keycloak_CVE-2022-1274_20-0-3

Keycloak Keycloak आधुनिक अनुप्रयोगों और सेवाओं के लिए एक ओपन सोर्स आइडेंटिटी और एक्सेस मैनेजमेंट समाधान है। इस रिपॉजिटरी में Keycloak सर्वर, जावा एडाप्टर और जावास्क्रिप्ट एडाप्टर का स्रोत कोड शामिल है। सहायता और दस्तावेज़ीकरण दस्तावेज़ीकरण यूज़र मेलिंग सूची - Keycloak के बारे में सहायता और सामान्...

infisical

Платформа управления секретами с открытым исходным кодом : Синхронизируйте секреты/конфигурации в вашей команде/инфраструктуре и предотвращайте утечки секретов. Slack | Infisical Cloud | Самостоятельное развертывание | Документация | Веб-сайт | Twitter | Вакансии удаленно/SF Введение Infisical —...

OpenAM

Open Access Management OpenAM è una soluzione di gestione degli accessi che include autenticazione, SSO, autorizzazione, federazione, entitlement e Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 e OpenID Connect garantiscono che OpenAM si integri facilmente con...

keycloak__keycloak_CVE-2022-3782_20-0-1

Keycloak Keycloak è una soluzione Open Source di Identity and Access Management per applicazioni e servizi moderni. Questo repository contiene il codice sorgente per il server Keycloak, gli adattatori Java e l'adattatore JavaScript. Aiuto e documentazione Documentazione Mailing list utenti -...

keycloak

Open-Source-Identitäts- und Zugriffsverwaltung Fügen Sie Anwendungen Authentifizierung hinzu und sichern Sie Dienste mit minimalem Aufwand. Sie müssen sich nicht um die Speicherung oder Authentifizierung von Benutzern kümmern. Keycloak bietet Benutzer-Föderation, starke Authentifizierung,...

lightwave

Was ist Lightwave Project Lightwave ist ein Open-Source-Projekt, das aus Enterprise-Identitäts- und Zugriffsverwaltungsdiensten besteht, die auf kritische Sicherheits-, Governance- und Compliance-Herausforderungen für Cloud-native Apps im Unternehmen abzielen. Durch die Integration mit Project...

CVE-2026-42976

This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892

CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...

PT-2026-70586

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A use-after-free condition in the Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally. Use-after-free i...

CVE-2026-18206 Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass

A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administrator uses a wildcard domain like .example.com to restrict which hosts can register or update clients. Due to improper validation, the...

Siemens Teamcenter Visualization 2412.x < 2412.0012 / 2506.x < 2506.0009 / 2512.x < 2512.2605 Privilege Escalation (SSA-288252)

The version of Siemens Teamcenter Visualization installed on the remote host is 2412.x prior to 2412.0012, 2506.x prior to 2506.0009, or 2512.x prior to 2512.2605. It is, therefore, affected by a vulnerability: - Untrusted search path in IAM Client SDK may allow an authenticated user to potential...

CVE-2026-63239 Hard-coded AWS IAM credentials vulnerability

A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing sensitive data and enabling malicious content injection, job manipulation, or email interception...

PT-2026-65710

A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing sensitive data and enabling malicious content injection, job manipulation, or email interception...