npm: better-auth: OAuth Proxy lets an attacker sign in as another user

npm: better-auth: OAuth Proxy lets an attacker sign in as another user vulnerability discovered by ? in WordPress npm better-auth versions = 1.5.0-beta.12, 1.7.7...

EUVD-2026-111076

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

GHSA-4FFR-JQ9G-5FFX Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service

Summary Nodemailer's SMTP client applies four regular expressions to a peer's EHLO response to detect the supported SASL mechanisms. Each pattern uses an alternation with two overlapping whitespace-matching sub-patterns, which produces quadratic On^2 backtracking whenever the mechanism name is...

Exploit for Improper Authentication in Microsoft

CVE-2026-80097 - Microsoft Authenticator Android Token Theft...

CVE-2026-117564

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWTSECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust,...

CVE-2026-117553

Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization links using responsemode=formpost to capture...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE — Detect

Fingerprint / reachability check for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE """atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from future import annotations from kittysploit import from lib.protocols.http.httpclient import Httpclient import sys, os, json, random, hashlib,...

Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Cr — Detect

Fingerprint / reachability check for Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Abyss Web Server X1 2.16.22.0...

CIRCUTOR PowerStudio SCADA WAVE JWT alg=none Identity Forgery (Cross-Microservic — Detect

Fingerprint / reachability check for CIRCUTOR PowerStudio SCADA WAVE JWT alg=none Identity Forgery Cross-Microservice Authentication Bypass !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CIRCUTOR PowerStudio SCADA WAVE JWT alg=none Identity Forgery Cross-Microservice Authentication...

NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address (RIP) Control

NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address RIP Control """NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address RIP Control""" from future import annotations from kittysploit import import os import socket import ssl import sys...

StreamSets Transformer 3.17.0 — "none" Authentication Mode Fallback + Un-sandbox — Detect

Fingerprint / reachability check for StreamSets Transformer 3.17.0 — "none" Authentication Mode Fallback + Un-sandboxed ScalaDTransform Code Execution → Anonymous Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for StreamSets Transformer 3.17.0 — "none" Authentication Mode Fallbac...

NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST

NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST """NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST""" from future import annotations from kittysploit import import socket import ssl import sys import time import re import os...

CVE-2026-92546

Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: before 0ef61f2e...

CVE-2026-65145

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2026-15586

Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: through 2026-10-27. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-117564

The nest-admin framework versions before 1.0.1 is vulnerable to an authentication bypass due to a hardcoded JWT_SECRET committed in the .env.production file. Attackers can exploit this by signing their own tokens with the known secret, which are then trusted by JwtStrategy and RbacGuard . This al...

CVE-2026-117564 nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWTSECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust,...

CVE-2026-117564

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWTSECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust,...

EUVD-2026-110842

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWTSECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust,...