Lucene search
+L

8300 matches found

CVE
CVE
added 2026/08/25 9:29 p.m.8 views

CVE-2026-80184

OpenStack Keystone versions before 29.0.3 are affected by a project-scope escape vulnerability in the token-method authentication path. Tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, application credentials, or trusts) can be submitted for reauthentication and, whe...

7.6CVSS5.4AI score
SaveExploits0References3
CVE
CVE
added 2026/08/25 9:19 p.m.5 views

CVE-2026-80182

OpenStack Keystone versions before 29.0.3 are affected by a delegation restriction bypass. Tokens obtained via OAuth1 access tokens , application credentials , or trust-scoped authentication could create new long-lived credentials or authorize new delegations that persist independently of, and ou...

7.6CVSS5.5AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 8:52 p.m.2 views

CVE-2017-18635

cve-2017-18635 PoC для CVE-2017-18635 Полная статья: Эксплуатация старого noVNC XSS CVE-2017-18635 в OpenStack...

6.1CVSS5.4AI score0.0481EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 7:33 p.m.3 views

bandit

.. image:: https://raw.githubusercontent.com/pycqa/bandit/main/logo/logotype-sm.png :alt: بانديت ====== .. image:: https://github.com/PyCQA/bandit/actions/workflows/pythonpackage.yml/badge.svg?branch=main :target:...

5.4AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/08/25 7:32 p.m.1 views

brawl-public-game-001

BRAWL من المشكلات الصعبة التي تواجه باحثي الأمن السيبراني عند تطوير قدرات الكشف والاستجابة، إيجاد بيئة واقعية لاختبار فرضياتهم وقدراتهم. أرخص طريقة هي اختبار القدرات على شبكة مختبر صغيرة. لكن هذه البيئة تفتقر إلى حجم شبكة المؤسسات الحقيقية والضوضاء البيئية الحقيقية التي تجعل الكشف أصعب بكثير. من...

5.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/08/25 3:35 p.m.4 views

CVE-2026-2035366

A flaw was found in OpenStack Keystone where an application credential token can escape its intended project scope through token-method reauthentication. Keystone rejects an explicit scope change for an application credential token, but an omitted scope falls through to the owner's default projec...

7.1CVSS5.4AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/25 3:35 p.m.4 views

CVE-2026-2035364

A flaw was found in OpenStack Keystone where delegation boundary enforcement is incomplete across trust, application credential, and OAuth1 authorization endpoints. Tokens obtained via delegated authentication methods, such as OAuth1 access tokens or custom Keystone authentication plugins, can...

8.1CVSS5.5AI score
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.162 views

Nova noVNC - Open Redirect

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-3654 info: name: Nova noVNC - Open Redirect author: geeknik severity: medium...

6.1CVSS7AI score0.26792EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/08/25 4:29 a.m.1 views

CVE-2013-0212

CVE-2013-0212 Version: https://github.com/openstack/glance/tree/4b768a4a847a0f5c857f4fe3f3bca720da9b3949...

4CVSS5.2AI score0.02989EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:29 a.m.1 views

CVE-2013-2006

CVE-2013-2006 Версия: https://github.com/openstack/keystone/blob/d43e2a51a1ed7adbed3c5ddf001d46bc4a824ae8...

2.1CVSS5.2AI score0.00607EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/24 8:05 a.m.11 views

CVE-2026-71201

A flaw was found in OpenStack Ironic. A project reader can exploit this vulnerability by sending a specially crafted request to the Ironic service. This allows the reader to access Portgroups that are assigned to Nodes belonging to or leased by other projects, leading to unauthorized information...

5CVSS4.8AI score0.00188EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/21 3:32 a.m.1 views

syntribos

===================== علامات الفريق والمستودع .. image:: http://governance.openstack.org/badges/syntribos.svg :target: http://governance.openstack.org/reference/tags/index.html .. image:: http://img.shields.io/badge/docs-latest-brightgreen.svg?style=flat :target:...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/08/21 3:07 a.m.8 views

CVE-2026-77648

A flaw was found in OpenStack Glance. A privileged administrator could exploit a vulnerability in the /v2/tasks API by crafting a specific import task. This action bypasses security filtering, enabling the administrator to perform Server-Side Request Forgery SSRF. As a result, an attacker could...

2.2CVSS5.3AI score0.00192EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/21 12:31 a.m.16 views

EUVD-2026-63759

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

2.2CVSS5.3AI score0.00192EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/21 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-77648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from t...

2.2CVSS5.5AI score0.00192EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/20 11:16 p.m.6 views

DEBIAN-CVE-2026-77648

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

2.2CVSS5.5AI score0.00192EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/20 11:16 p.m.8 views

CVE-2026-77648

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

2.2CVSS0.00192EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/20 10:37 p.m.8 views

CVE-2026-77648

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

2.2CVSS5.4AI score0.00192EPSS
SaveExploits0
CVE
CVE
added 2026/08/20 10:37 p.m.34 views

CVE-2026-77648

CVE-2026-77648 is a Server-Side Request Forgery (SSRF) vulnerability in OpenStack Glance through version 32.0.0. The /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing a privileged administrator to fetch internal URLs from the Glance service network using http:// ...

2.2CVSS5.3AI score0.00192EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/20 10:37 p.m.39 views

CVE-2026-77648

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

2.2CVSS0.00192EPSS
SaveExploits0References2
Rows per page
Query Builder