CVE-2026-63159

Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1login.password, a deterministic and reusable value. Attackers can derive or brute-force the reset...

CVE-2026-63160

Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the bearer credential held in the user's cookie. Attackers who gain access to the stored token, such as through database or...

CVE-2026-85473 Out-of-Range Timestamp Claim Handling in auth0/java-jwt

The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim exp, nbf, iat containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the...

CVE-2026-78632

The Okta RADIUS Agent Windows installer contains a vulnerability where it assigns improper write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals. This configuration affects the directories housing the agent configuration, logs, and the AES encryption key . Consequ...

CVE-2026-107371 Missing Verification of auth_time Claim in auth0.js

When the authorize method is called with a maxAge parameter, the auth0.js library does not validate the authtime claim in the resulting ID token against the requested maxAge value. As a result, an application may process an ID token that represents an authentication event older than the requested...

CVE-2026-107371

The auth0.js library contains a vulnerability where the authorize() method fails to validate the auth_time claim in the resulting ID token against the provided maxAge parameter. This flaw allows an application to potentially process an ID token representing an authentication event that is older t...

CVE-2026-63160 Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage

Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the bearer credential held in the user's cookie. Attackers who gain access to the stored token, such as through database or...

CVE-2026-63160 Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage

Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the bearer credential held in the user's cookie. Attackers who gain access to the stored token, such as through database or...

CVE-2026-63160

The Omnispace Agora Project versions prior to 26.10.0 are vulnerable to insecure storage of persistent remember-me tokens . The software stores these tokens verbatim on the server-side, meaning the stored value is identical to the bearer credential held in the user's cookie. An attacker who gains...

CVE-2026-63159

Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1login.password, a deterministic and reusable value. Attackers can derive or brute-force the reset...

CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover

Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1login.password, a deterministic and reusable value. Attackers can derive or brute-force the reset...

CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover

Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1login.password, a deterministic and reusable value. Attackers can derive or brute-force the reset...

CVE-2026-63159

The Omnispace Agora Project prior to version 26.10.0 is vulnerable to an account takeover due to a predictable password-reset token mechanism. The root cause is the use of a deterministic and reusable value, specifically sha1(login.password) , to generate reset tokens. This allows unauthenticated...

CVE-2026-63159 Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover

Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1login.password, a deterministic and reusable value. Attackers can derive or brute-force the reset...

cve-2026-105221-gist-tls

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-105221-gist-tls cve-2026-105221-gist-tls gist RubyGem 6.1.0 - defunkt Class: TLS verify bypass credential theft Reach: Remote on-path httpconnection sets OpenSSL::SSL::VERIFYNONE. HTTPS to GitHub still...

CVE-2026-110220

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

CVE-2026-110220 Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

EUVD-2026-99261

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

CVE-2026-110220

The Kubeflow Model Registry (versions through 0.3.17 ) is vulnerable to a Server-Side Request Forgery (SSRF) flaw. The root cause lies in the handling of the modelregistry.kubeflow.org/url annotation within the InferenceService Controller . This allows namespace users to create an InferenceServic...

CVE-2026-110220 Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...