3649 matches found
CVE-2026-120415
The undici HTTP client for Node.js (versions 7.0.0–7.30.1 and 8.0.0–8.12.3) contains a vulnerability where the redirect interceptor fails to strip sensitive headers—such as Authorization , Cookie , Proxy-Authorization , and Host —during cross-origin redirects when headers are provided as an array...
CVE-2026-63183
A flaw was found in OmniAuth. When host validation is not configured, OmniAuth derives authentication callback URLs from untrusted request headers. A remote, unauthenticated attacker can exploit this vulnerability by sending a forged HTTP Hypertext Transfer Protocol Host header. This can allow an...
CVE-2026-115885
A flaw was found in LangGraph CLI. When deploying applications with verbose logging enabled, the tool inadvertently outputs temporary container registry authentication tokens to the console. An unauthorized user with read access to terminal recordings or continuous integration CI build logs can...
mikrotik0dayScanner
Mikrotik 0day Credential Disclosure Scanner Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The weakness exists due to improper authentication in the exposed by default Winbox interface on port 8291/TCP. A remote attacker can send specially...
D-Link DIR-803 - Authentication Bypass
An authentication bypass vulnerability exists in D-Link DIR-803 routers firmware A1 1.04 and earlier. By manipulating the AUTHORIZEDGROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication. id:...
Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent
Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...
Crestron Device - Credentials Disclosure
An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...
WordPress Travelly – Tour & Travel Booking Manager for WooCommerce plugin <= 2.3.11 - Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure vulnerability
Missing Authorization to Authenticated Contributor+ Payment Gateway Credential Disclosure vulnerability discovered by Wordfence PRISM in WordPress Plugin WpTravelly versions = 2.3.11...
EUVD-2026-117411
Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache Juneau RestClient followed HTTP redirects while keeping credential headers from the original request, so a server that redirected the client to a different host or port, or from HTTPS to HTTP, could receive headers su...
GoAhead Camera - Credential Disclosure
GoAhead camera credential disclosure vulnerability in system.ini. The vulnerability affects certain Wireless IP Camera P2P WIFICAM devices and allows unauthenticated remote attackers to access the system.ini configuration file through a crafted HTTP request. The exposed configuration may contain...
CVE-2026-121971
The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope such as authbearer or authbasic into a request before resolving a relative URL against the baseuri, allowing a network-path reference such as "//evil.example/steal" to be sent to another origin together...
CVE-2026-121971 Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References
The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope such as authbearer or authbasic into a request before resolving a relative URL against the baseuri, allowing a network-path reference such as "//evil.example/steal" to be sent to another origin together...
EUVD-2026-117008
The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope such as authbearer or authbasic into a request before resolving a relative URL against the baseuri, allowing a network-path reference such as "//evil.example/steal" to be sent to another origin together...
CVE-2026-121971
The ScopingHttpClient component in Symfony HttpClient is vulnerable to a credential disclosure flaw. The application incorrectly merges default scope options (such as auth_bearer or auth_basic ) into a request before resolving a relative URL against a base_uri . This allows a network-path referen...
CVE-2026-121971 Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References
The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope such as authbearer or authbasic into a request before resolving a relative URL against the baseuri, allowing a network-path reference such as "//evil.example/steal" to be sent to another origin together...
CVE-2026-39430
The HP Poly EagleEye Cube USB 1.3.1-001267 devices are vulnerable to a broken administrator authentication flow because session management and access controls are not enforced on the device-side. An unauthenticated user can bypass the login step using a modified or custom client to perform admini...
PT-2026-136975
On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls are not enforced device-side. Thus, an unauthenticated user can change administrator-level settings without logging in via a modified client that bypasses the...
UBUNTU-CVE-2026-121971
The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope such as authbearer or authbasic into a request before resolving a relative URL against the baseuri, allowing a network-path reference such as "//evil.example/steal" to be sent to another origin together...
CVE-2026-121971
The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope such as authbearer or authbasic into a request before resolving a relative URL against the baseuri, allowing a network-path reference such as "//evil.example/steal" to be sent to another origin together...
EUVD-2026-116925
On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls are not enforced device-side. Thus, an unauthenticated user can change administrator-level settings without logging in via a modified client that bypasses the...