keycloak: open redirect via "form_post.jwt" JARM response mode

A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "formpost.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab has a security vulnerability that stems from a patch that could be...

CVE-2022-31025 Invite bypasses user approval in Discourse

Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the stable branch and 2.9.0beta5 on the beta and tests-passed branches, inviting users on sites that use single sign-on could bypass the mustapproveusers check and invites by staff are always approved...

Exploit for CVE-2020-14882

CVE-2020–14882 Weblogic Unauthorized bypass RCE bypass pat...

OracleVM 3.2 : bash (OVMSA-2014-0022)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2014-7169 - bypass patch bug Related: 1146321 - CVE-2014-7169 - proper 3.2 backport - courtesy of Florian Weimer Related: 1146321 - CVE-2014-7169 Resolves: 1146321 - Check for fishy environment...

Cicada-known Enterprise Portal system v2. 5. 1 to bypass the patch to continue injection-vulnerability warning-the black bar safety net

/system/module/user/model.php public function update$account / If the user want to change his password. / if$this-post-password1 != false $this-checkPassword; ifdao::isError return false; $password = $this-createPassword$this-post-password1, $account; $this-post-set'password', $password; $user =...

Apache Struts2 s2-0 2 0 patch to bypass and protection-vulnerability warning-the black bar safety net

Overview: Struts2 is the second generation based on Model-View-Controller MVCmodel java enterprise web application framework. Apache Struts versions 2.0.0-2.3.16 version of the default upload mechanism is based on the Commons FileUpload 1.3 version, the version in the realization of a denial of...

boblog arbitrary variable overwrite vulnerability(II)-vulnerability warning-the black bar safety net

Previously 80vul. com published on a bo-blog of vulnerabilities1,this vulnerability has already been an official patch,but then the tick. com released a bypass patch Method2,shame is triggered when there is a certain limit,here I come again published a without any limitation bypassing the patch t...

Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch)

Windows XP/Vista .ANI Remote Exploit bypass eeye patch Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build 6000 default installation and UAC enabled Windows Vista Ultimate Version 6.0 Build 60...

[SA13355] PHProjekt Unspecified "setup.php" Security Bypass Vulnerability

TITLE: PHProjekt Unspecified "setup.php" Security Bypass Vulnerability SECUNIA ADVISORY ID: SA13355 VERIFY ADVISORY: http://secunia.com/advisories/13355/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: PHProjekt 4.x http://secunia.com/product/4346/ DESCRIPTION:...