6647 matches found
CVE-2026-83589 Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter rd during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an...
EUVD-2026-90589
A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter rd during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an...
CVE-2026-83589 Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter rd during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an...
Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo (crlsa-2022_5717)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225717 advisory. grafana: OAuth account takeover CVE-2022-31107 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has n...
Rocky Linux 9 [CIQ] Security Update: grafana / grafana-debuginfo (crlsa-2022_5716)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225716 advisory. grafana: OAuth account takeover CVE-2022-31107 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has n...
Rocky Linux 10.2 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_54178)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654178 advisory. grafana: Grafana: Privilege escalation via dashboard overwrite CVE-2026-33377 grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6...
CVE-2026-94127
CVE-2026-94127 — Herramienta de detección de F5 BIG-IP APM Defensiva Autor: https://github.com/FurkanKAYAPINAR/ Un detector defensivo, no explotable para CVE-2026-94127 , un desbordamiento de búfer basado en heap CWE-122 en F5 BIG-IP APM que permite a un atacante remoto no autenticado lograr...
CVE-2026-97288
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
CVE-2026-97274
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...
CVE-2026-97288 WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
CVE-2026-97288
The WordPress OAuth Server plugin, version 4.5.1 and below , is vulnerable to a Cross-Site Scripting (XSS) flaw. The vulnerability is attributed to the Contributor role. While the vulnerability is confirmed, specific technical root causes, exploitation details, or remediation steps are not provid...
CVE-2026-97288 WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
EUVD-2026-89929
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
CVE-2026-97274
The WordPress OAuth Single Sign On – SSO (OAuth Client) plugin, versions
EUVD-2026-89923
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...
CVE-2026-97274 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...
WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin OAuth Server versions = 4.5.1...
kit-oauth
kit-oauth 用于Kit应用程序的OAuth 2.0客户端库 TOC 文件 文件| 描述 ---|--- .editorconfig| 编辑器格式配置 .gitignore| 构建产物和依赖的Git忽略规则 .tool-versions| asdf工具版本（Zig, Kit） LICENSE| MIT许可证文件 README.md| 本文件 examples/client-credentials.kit| 客户端凭据示例（模拟运行） examples/github.kit| GitHub授权码示例（模拟运行） kit.toml| 包清单（包含元数据、能力和任务）...
CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo
🔐 OAuth 安全实验室：CVE-2025-4679 教育模拟器 一个安全、隔离的环境，用于学习 OAuth 漏洞，无需冒真实系统的风险 🚀 快速开始 | 📚 学习路径 | 🛡️ 安全环境 | 👥 贡献者 📖 概述 本教育实验室模拟了在 Synology 的 Active Backup for Microsoft 365 中发现的 CVE-2025-4679 漏洞 ，该漏洞中客户端密钥在 HTTP 重定向中被暴露。该实验室提供了一个 100% 安全的环境 ，用于理解、分析和学习这一关键安全缺陷。 ⚠️ 重要提示 ：这是一个仅供教育使用的工具...
