5048 matches found
PT-2026-70358
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can...
PT-2026-70795
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...
PT-2026-70798
Name of the Vulnerable Software and Affected Versions PeerTube versions prior to 8.1.6 Description An issue exists in the ActivityPub-federated video streaming platform where the updateScore function in ActorFollowModel interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL...
PT-2026-70242
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an...
PT-2026-70254
TypeBot is a chatbot builder tool. Prior to version 3.17.0, the handleGetSheets API handler POST /api/sheets/getSheets does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data...
CVE-2026-72871
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the unauthenticated /api/providers/github/setup route in apps/dokploy/pages/api/providers/github/setup.ts trusts ghinit organizationId and userId values from the state parameter and calls createGithub in...
CVE-2026-72871
Dokploy (PaaS) vulnerability CVE-2026-72871: Before version 0.29.13, the unauthenticated /api/providers/github/setup route in Dokploy trusts gh_init organizationId and userId from the state and calls createGithub, enabling an attacker to insert a GitHub App provider containing client_secret, webh...
CVE-2026-72871 Dokploy: Unauthenticated Git Provider Injection via GitHub OAuth Callback
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the unauthenticated /api/providers/github/setup route in apps/dokploy/pages/api/providers/github/setup.ts trusts ghinit organizationId and userId values from the state parameter and calls createGithub in...
CVE-2026-72871 Dokploy: Unauthenticated Git Provider Injection via GitHub OAuth Callback
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the unauthenticated /api/providers/github/setup route in apps/dokploy/pages/api/providers/github/setup.ts trusts ghinit organizationId and userId values from the state parameter and calls createGithub in...
CVE-2023-30313
creationtimestamp| type| source ---|---|--- 2026-08-10 13:31:31+00:00| seen| https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9...
EUVD-2026-55004
The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth state value on its Google Calendar authorization callback, which is also hooked for unauthenticated users, allowing an unauthenticated attacker to overwrite the site's stored Goog...
CVE-2026-17023
The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth state value on its Google Calendar authorization callback, which is also hooked for unauthenticated users, allowing an unauthenticated attacker to overwrite the site's stored Goog...
CVE-2026-47660
Pathling Server prior to 2.0.0 is affected: the bulk-submit flow accepts an explicit oauthMetadataUrl that is not validated against pathling.bulkSubmit.allowableSources. If provided, the OAuth flow trusts the metadata and the token_endpoint from the caller-chosen location, then builds outbound OA...
CVE-2026-47363
In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...
CVE-2026-16262
The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session, allowing an unauthenticated attacker to log a victim into an attacker-controlled account login CSRF, so that the victim's subsequent activity is stored under and...
CVE-2026-70636
Flowise 3.1.4 contains an authentication bypass affecting the OAuth2 credential refresh endpoint. The root cause is a prefix-based whitelist in the authentication middleware (packages/server/src/utils/constants.ts) that allows an unauthenticated POST to the oauth2-credential refresh route when a ...
CVE-2026-64665 Statamic: Account takeover via OAuth email matching without email-verification check
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user, potentially including a super admin, witho...
CVE-2026-64665 Statamic: Account takeover via OAuth email matching without email-verification check
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user, potentially including a super admin, witho...
CVE-2026-64665
Statamic (CMS built on Laravel) prior to versions 5.74.1 and 6.24.0 is affected. When OAuth login is enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user (potentially a super admin) by matching OAuth identities to ...