210889 matches found
UBUNTU-CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
Improper Authentication
Apache ActiveMQ Artemis is vulnerable to Improper Authentication. The vulnerability is due to insufficient validation of CORE protocol SESSIONREATTACH packets, which allows an unauthenticated remote attacker to hijack an existing authenticated session and take over its ongoing execution...
EUVD-2026-110303
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
EEF-CVE-2026-65625 Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose
Summary The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in...
3snake
3snake - dump sshd and sudo credential related strings Disclaimer I Wrote This In College About Targeting rooted servers, reads memory from sshd and sudo system calls that handle password based authentication. Doesn't write any memory to the traced processes. Spawns a new process for every sshd a...
Origin Validation Error
Overview social-auth-core is a package that makes Python social authentication simple. Affected versions of this package are vulnerable to Origin Validation Error via the validateclaims method in socialcore/backends/openidconnect.py, where a nonce stored in shared association storage is not bound...
CVE-2026-116634
OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider...
Security Bulletin:Multiple vulnerabilities in postgresql may affect IBM Infosphere Change Data Capture (CVE-2026-107314, CVE-2026-107315)
Summary Multiple security vulnerabilities have been identified in postgresql, PostgreSQL JDBC Driver Postgresql. postgresql is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
CVE-2026-116634 OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens
OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider...
EUVD-2026-110063
OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider...
CVE-2026-116634
OmniRoute versions 3.8.50 before 3.8.52 are vulnerable to a missing authentication flaw (CWE-306). When requireLogin is disabled, unauthenticated attackers can issue sync tokens via POST /api/sync/tokens. These tokens can be used against GET /api/sync/bundle to retrieve decrypted provider credent...
CVE-2026-116634 OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens
OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider...
SUSE CVE-2026-116193
Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticated attackers skip authentication by sending OPTIONS requests. Attackers can probe arbitrary paths and compare Allow header values to determine whether files or collections exist...
CVE-2026-116371
A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. The vendor w...
CVE-2026-102649 Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset
Burrito is a Terraform Automation Collaboration Software TACoS Kubernetes operator. Prior to 0.13.0, POST /api/webhook accepts unsigned GitHub and GitLab events when a TerraformRepository's credentials omit webhookSecret or set it to an empty value, including credentials configured for git...
CVE-2026-102649
The Burrito Kubernetes operator (Terraform Automation Collaboration Software) is vulnerable to unauthorized actions prior to version 0.13.0 . When a TerraformRepository omits or leaves the webhookSecret empty, the POST /api/webhook endpoint accepts unsigned GitHub and GitLab events. An attacker w...
CVE-2026-115910
Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in socialcore/backends/openidconnect.py uses getandstorenonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and getnonce and validateclaims verify only that...
CVE-2026-115910 Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim
Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in socialcore/backends/openidconnect.py uses getandstorenonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and getnonce and validateclaims verify only that...