6647 matches found
CVE-2026-83589 Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter rd during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an...
EUVD-2026-90589
A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter rd during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an...
CVE-2026-83589 Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter rd during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an...
Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo (crlsa-2022_5717)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225717 advisory. grafana: OAuth account takeover CVE-2022-31107 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has n...
Rocky Linux 9 [CIQ] Security Update: grafana / grafana-debuginfo (crlsa-2022_5716)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225716 advisory. grafana: OAuth account takeover CVE-2022-31107 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has n...
Rocky Linux 10.2 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_54178)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654178 advisory. grafana: Grafana: Privilege escalation via dashboard overwrite CVE-2026-33377 grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6...
CVE-2026-94127
CVE-2026-94127 — F5 BIG-IP APM 检测工具（防御性） 作者： https://github.com/FurkanKAYAPINAR/ 一个针对 CVE-2026-94127 的防御性、非利用 检测器。该漏洞是 F5 BIG-IP APM 中基于堆的缓冲区溢出（CWE-122），允许未经身份验证的远程攻击者实现远程代码执行（RCE） 。 CVSS 3.1：9.8 / CVSS 4.0：9.3（严重） 已在野被积极利用 — 已列入 CISA KEV 目录。 F5 安全公告 K000162605 ，发布于 2026-09-22 。 CISA...
CVE-2026-97288
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
CVE-2026-97274
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...
CVE-2026-97288 WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
CVE-2026-97288
The WordPress OAuth Server plugin, version 4.5.1 and below , is vulnerable to a Cross-Site Scripting (XSS) flaw. The vulnerability is attributed to the Contributor role. While the vulnerability is confirmed, specific technical root causes, exploitation details, or remediation steps are not provid...
CVE-2026-97288 WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
EUVD-2026-89929
Contributor Cross Site Scripting XSS in OAuth Server = 4.5.1 versions...
CVE-2026-97274
The WordPress OAuth Single Sign On – SSO (OAuth Client) plugin, versions
EUVD-2026-89923
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...
CVE-2026-97274 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...
WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin OAuth Server versions = 4.5.1...
kit-oauth
kit-oauth KitアプリケーションのためのOAuth 2.0クライアントライブラリ TOC ファイル ファイル| 説明 ---|--- .editorconfig| エディタの書式設定 .gitignore| ビルド成果物と依存関係のGit無視ルール .tool-versions| asdfツールバージョン Zig, Kit LICENSE| MITライセンスファイル README.md| このファイル examples/client-credentials.kit| ドライランのクライアントクレデンシャル例 examples/github.kit|...
CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo
🔐 OAuth 安全实验室：CVE-2025-4679 教育模拟器 一个安全、隔离的环境，用于学习 OAuth 漏洞，无需冒真实系统的风险 🚀 快速开始 | 📚 学习路径 | 🛡️ 安全环境 | 👥 贡献者 📖 概述 本教育实验室模拟了在 Synology 的 Active Backup for Microsoft 365 中发现的 CVE-2025-4679 漏洞 ，该漏洞中客户端密钥在 HTTP 重定向中被暴露。该实验室提供了一个 100% 安全的环境 ，用于理解、分析和学习这一关键安全缺陷。 ⚠️ 重要提示 ：这是一个仅供教育使用的工具...
