POC-CVE-2022-30600

Proof of concept for CVE-2022-30600 Overview This repository contains 2 implementations for a proof of concept which exploits CVE-2022-30600. CVE-2022-30600 is a security vulnerability which allows an attacker to bypass the account lockout threshold within the moodle webapp. As outlined by the...

CVE-2026-78428

For users authenticated through SAML or OpenID Connect OIDC, this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently...

EUVD-2026-81412

For users authenticated through SAML or OpenID Connect OIDC, this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently...

CVE-2026-56583

HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse...

EUVD-2026-46346

HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse...

CVE-2026-56583 HCL MyCloud was affected with Concurrent Login Vulnerability.

HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse...

CVE-2026-56583 HCL MyCloud was affected with Concurrent Login Vulnerability.

HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse...

CVE-2026-56583

Technical details are not publicly available in the provided documents. Monitor for updates from HCL and NVD to obtain affected versions, root cause, and remediation guidance.

CVE-2026-56583

HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse...

CVE-2026-56583: Insufficient Session Expiration

HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse...

PT-2026-62009

Name of the Vulnerable Software and Affected Versions HCL MyCloud affected versions not specified Description A concurrent login issue exists that may increase the risk of unauthorized access, session hijacking, and account misuse. Recommendations At the moment, there is no information about a...

PT-2026-60476

A race condition in the account lockout mechanism in Delphix Continous Data allowed the lockout threshold to be bypassed through concurrent authentication requests. Parallel login attempts were processed before the failed-login counter and lockout status were updated, defeating brute-force...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

CVE-2026-0393

CVE-2026-0393 affects CODESYS Visualization. Root cause: insufficient isolation of authentication data during concurrent login operations allows credentials to be exposed remotely between low-privileged visualization users, limited to the login phase within an active visualization session. Impact...

CVE-2026-0393

The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session...