Lucene search
+L

173063 matches found

AlpineLinux
AlpineLinux
added 2026/08/28 10:12 a.m.11 views

CVE-2026-73208

An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...

7.4CVSS5.9AI score0.00256EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/28 10:12 a.m.8 views

EUVD-2026-67680

An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...

7.4CVSS5.9AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/28 10:12 a.m.11 views

EUVD-2026-67673

Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentication fields, so a value sent by that host can be injected as an internal authentication field. Any host permitted to act as a trusted proxy can authenticate as any user without...

4.3CVSS5.8AI score0.00193EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/28 10:12 a.m.20 views

CVE-2026-42008

CVE-2026-42008 is an authentication bypass in Dovecot (Open-Xchange fork) where forwarding information from a trusted proxy host is not kept separate from Dovecot's own authentication fields. A malicious or compromised trusted proxy host can inject an internal authentication field, allowing it to...

4.3CVSS5.8AI score0.00193EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/28 10:12 a.m.36 views

CVE-2026-42008

Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentication fields, so a value sent by that host can be injected as an internal authentication field. Any host permitted to act as a trusted proxy can authenticate as any user without...

4.3CVSS0.00193EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/08/28 10:12 a.m.9 views

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

7.5CVSS5.9AI score0.00375EPSS
SaveExploits0
CVE
CVE
added 2026/08/28 10:12 a.m.25 views

CVE-2026-33605

CVE-2026-33605 affects the Open-Xchange (OX) ManageSieve service. An unauthenticated attacker can crash the managesieve-login process by sending a small malformed command before authenticating. The blast radius depends on the operating mode: in high-security mode (default for community releases),...

7.5CVSS5.9AI score0.00375EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2026/08/28 10:09 a.m.12 views

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the...

9.8CVSS6.5AI score0.00926EPSS
SaveExploits3
Cvelist
Cvelist
added 2026/08/28 9:42 a.m.32 views

CVE-2026-81777 WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0...

5.3CVSS0.00286EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/28 9:42 a.m.7 views

EUVD-2026-67656

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0...

5.3CVSS5.9AI score0.00286EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/28 9:42 a.m.31 views

CVE-2026-81777

Essential Addons for Elementor (WordPress plugin by WPDeveloper) versions up to and including 6.8.0 are affected by an Authentication Bypass by Spoofing vulnerability that enables Identity Spoofing . The issue was discovered by Gaurav popalghat and scored CVSS 5.3 (MEDIUM) , with a network attack...

5.3CVSS5.9AI score0.00286EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/28 8:16 a.m.11 views

CVE-2026-76581

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated wdpssostep1 and wdpssostep2 AJAX actions, where step 1 signs and disclose...

9.8CVSS0.00339EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2026/08/28 6:39 a.m.41 views

CVE-2026-76581 WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated wdpssostep1 and wdpssostep2 AJAX actions, where step 1 signs and disclose...

9.8CVSS0.00339EPSS
SaveExploits2References2
CVE
CVE
added 2026/08/28 6:39 a.m.106 views

CVE-2026-76581

CVE-2026-76581 is a Critical (CVSS 9.8) unauthenticated Authentication Bypass in the WPMU DEV Dashboard plugin for WordPress (≤ 5.0.1 , ~350,000 installs). The root cause is HMAC canonicalization confusion between two unauthenticated AJAX actions: wdpsso_step1 signs an unseparated concatenation o...

9.8CVSS5.8AI score0.00339EPSS
SaveIn wildExploits2References2
EUVD
EUVD
added 2026/08/28 6:39 a.m.8 views

EUVD-2026-67464

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated wdpssostep1 and wdpssostep2 AJAX actions, where step 1 signs and disclose...

9.8CVSS5.8AI score0.00339EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/28 6:34 a.m.4 views

CVE-2023-27100

CVE-2023-27100 - pfSense Umgehung des Anti-Brute-Force-Schutzes Problembeschreibung Das Authentifizierungssystem versucht, informativ zu sein und zusätzliche Informationen zusammen mit IP-Adressen auszugeben, um vollständig zu identifizieren, von wo aus sich ein Benutzer anmeldet, wenn er sich üb...

9.8CVSS7.3AI score0.09844EPSS
SaveExploits5
EUVD
EUVD
added 2026/08/28 6:11 a.m.10 views

EUVD-2026-67578

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

5.4CVSS6.1AI score0.00169EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/28 6:10 a.m.25 views

CVE-2026-73827

SOY Calendar is affected by a cross-site scripting (XSS) vulnerability that allows an arbitrary script to be executed in the web browser of a user who is logging into the product. The vulnerability requires low privileges and active user interaction , with a CVSS 3.0 base score of 5.4 (MEDIUM) an...

5.4CVSS6.1AI score0.00169EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 5:07 a.m.4 views

CVE-2026-41940

CVE-2026-41940 — cPanel2Shell Interaktives Ausnutzungstool für CVE-2026-41940 🧠 Was ist CVE-2026-41940 ? cPanel2Shell nutzt eine kritische Schwachstelle zur Authentifizierungsumgehung in cPanel & WHM aus. Die Schwachstelle wird durch eine CRLF-Injection im Login-/Session-Handling-Mechanismus...

9.8CVSS7.5AI score0.98527EPSS
SaveExploits74
EUVD
EUVD
added 2026/08/28 12:32 a.m.6 views

EUVD-2026-67289

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

8.7CVSS5.3AI score0.00364EPSS
SaveExploits0References3
Rows per page
Query Builder