Form-Tools-3.1.1-RCE

Form-Tools-3.1.1-RCE CVE-2024-22722 RCE via SSTI Automation with Python. Form Tools 3.1.1 中的服务端模板注入（SSTI）漏洞允许攻击者通过应用程序的添加表单部分中的“组名”字段执行任意命令。此脚本自动化创建新表单和组的过程，并通过修改“组名”字段，返回类似 shell 的界面，同时返回已执行命令的结果。...

CVE-2024-48652

CVE-2024-48652 Vulnerabilidad de Cross Site Scripting en camaleon-cms v.2.7.5 permite a un atacante remoto ejecutar código arbitrario a través del campo de nombre del grupo de contenido Pasos para reproducir: 1. Abra la URL: http://127.0.0.1/admin/dashboard 2. Inicie sesión con credenciales de...

POC-CVE-2026-19626

CVE-2026-19626 — RCE in report generation authenticated, non-admin Status: CONFIRMED — pure-REMOTE, non-admin, REST-only 6.7.2-14.el9 lab, 2026-08-21. The weaponized chain this is what poc.py does: 1. login as any regular org user 2. POST /rest/group with name: "=system''" — braces/quotes accepte...

CVE-2026-70463

An authorization bypass flaw was found in the rsync daemon. The auth users directive parser incorrectly handles group names containing spaces due to comma-only tokenization. This flaw causes deny rules to be silently discarded, allowing an authenticated user to bypass restrictions and gain...

CVE-2026-19608

A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system evaluates group-based policies using tokens that only contain group names rather than full paths. If two groups in...

CVE-2026-70463

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

AZL-95801 CVE-2026-70463 affecting package rsync 3.4.3-1

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

ALPINE-CVE-2026-70463

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

CVE-2026-70463 rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

CVE-2026-70463

CVE-2026-70463 affects rsync up to version 3.4.x (before 3.5.0) where the auth users parser incorrectly tokenizes the user list by comma, failing to correctly handle entries like @Group Name with spaces. This causes the deny rule for that group to be silently discarded during parsing, enabling an...

CVE-2026-70463

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

CVE-2026-70463 rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

CVE-2026-70463

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

PT-2026-71663

Name of the Vulnerable Software and Affected Versions rsync versions 3.1.0 through 3.4.x Description An authorization bypass exists in the parsing of the auth users directive. The parser utilizes comma-only tokenization when splitting the user list, which fails to correctly process entries...

CVE-2026-18207

A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a...

CVE-2026-18207

CVE-2026-18207 : Keycloak-services suffers a group-name based membership check bug in the client policy enforcement, allowing an attacker with client-management privileges to bypass security hardening by joining a differently-nested group with the same name. This can enable registering or updatin...

CVE-2026-18207 Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching

A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a...

CVE-2026-18207

A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a...

PT-2026-65741

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the client policy enforcement mechanism where the system verifies group membership using names rather than unique identifiers. An attacker possessing client management...

DEBIAN-CVE-2026-26199

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...