UBUNTU-CVE-2026-44202

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-62379 OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback

Open Access Management OpenAM is an access management solution. Prior to 16.1.2, the pre-authentication /authservice PLL endpoint accepts a CustomCallback XML element whose className value selects an arbitrary Java class for AuthXMLUtils to load and instantiate without verifying that it implement...

keycloak__keycloak_CVE-2022-1274_20-0-3

Keycloak Keycloak 是一个面向现代应用和服务的开源身份与访问管理解决方案。 此仓库包含 Keycloak 服务器、Java 适配器和 JavaScript 适配器的源代码。 帮助与文档 文档 用户邮件列表 - 用于获取 Keycloak 帮助和一般性问题的邮件列表 报告安全漏洞 如果您发现了安全漏洞，请查看如何正确报告漏洞的说明 报告问题 如果您认为发现了 Keycloak 中的缺陷，请创建一个问题。 请记得提供良好的摘要、描述以及重现问题的步骤。 开始使用 要运行 Keycloak，请从我们的网站下载发行版。解压并运行： root@kitploit:...

keycloak__keycloak_CVE-2022-3782_20-0-1

Keycloak Keycloak 是一个面向现代应用和服务的开源身份与访问管理解决方案。 此仓库包含 Keycloak 服务器、Java 适配器和 JavaScript 适配器的源代码。 帮助与文档 文档 用户邮件列表 - 关于 Keycloak 的帮助和一般问题的邮件列表 报告安全漏洞 如果你发现了一个安全漏洞，请查看如何正确报告的说明。 报告问题 如果你认为发现了 Keycloak 的一个缺陷，请开启一个问题。请记得提供良好的摘要、描述以及重现问题的步骤。 开始使用 要运行 Keycloak，请从我们的网站下载分发版本。解压并运行： root@kitploit:...

keycloak__keycloak_CVE-2022-4137_20-0-3

Keycloak Keycloak 是一款面向现代应用程序和服务的开源身份与访问管理解决方案。 此仓库包含 Keycloak 服务器、Java 适配器以及 JavaScript 适配器的源代码。 帮助与文档 文档 用户邮件列表 - 用于寻求帮助和询问 Keycloak 相关问题的邮件列表 报告安全漏洞 如果您发现了安全漏洞，请查阅如何正确报告漏洞的说明 报告问题 如果您认为发现了 Keycloak 中的缺陷，请开启一个 issue。 请记得提供清晰的摘要、描述以及复现该问题的步骤。 快速入门 要运行 Keycloak，请从我们的网站下载发行版。解压并运行： root@kitploit:...

EUVD-2026-74548

Tanium addressed an improper access controls vulnerability in Comply...

CVE-2026-87037 Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply...

PT-2026-88963

TL;DR. The FortiPAM Chrome extension 1M+ users, used for Privileged Access Management, allowed any site to set the browser's proxy for the session, alongside allowing any site to create a new tab and send screen recordings of it to an attacker's server. That makes for trivial phishing attacks whi...

CVE-2026-42976

This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892

CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...

PT-2026-70586

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A use-after-free condition in the Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally. Use-after-free i...

CVE-2026-18206 Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass

A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administrator uses a wildcard domain like .example.com to restrict which hosts can register or update clients. Due to improper validation, the...

Siemens Teamcenter Visualization 2412.x < 2412.0012 / 2506.x < 2506.0009 / 2512.x < 2512.2605 Privilege Escalation (SSA-288252)

The version of Siemens Teamcenter Visualization installed on the remote host is 2412.x prior to 2412.0012, 2506.x prior to 2506.0009, or 2512.x prior to 2512.2605. It is, therefore, affected by a vulnerability: - Untrusted search path in IAM Client SDK may allow an authenticated user to potential...

CVE-2026-63239 Hard-coded AWS IAM credentials vulnerability

A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing sensitive data and enabling malicious content injection, job manipulation, or email interception...

PT-2026-65710

A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing sensitive data and enabling malicious content injection, job manipulation, or email interception...

MAL-2026-11147 Malicious code in simple-probe-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0457a026ab28fbb641d11e4e9ac9d60d026fd77210972f72e6ac931b4b06c59c On npm install, postinstall.js executes shell commands that query cloud instance metadata services AWS IMDS at 169.254.169.254, plus Tencent, Aliyun,...