CVE-2024-47077 authentik cross-provider token validation problems

authentik is an open-source identity provider. Prior to versions 2024.8.3 and 2024.6.5, access tokens issued to one application can be stolen by that application and used to impersonate the user against any other proxy provider. Also, a user can steal an access token they were legitimately issued...

authentik 安全漏洞

authentik is an open source identity provisioning application from authentik Open Source. A security vulnerability exists in authentik that stems from the fact that users can steal their legitimately obtained access tokens and use them to access other applications that they are not authorized to...

PT-2024-32393

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2024.8.3 authentik versions prior to 2024.6.5 Description The issue allows access tokens issued to one application to be stolen and used to impersonate the user against any other proxy provider. A user can also stea...

Hackers Could Have Remotely Controlled Kia Cars Using Only License Plates

Cybersecurity researchers have disclosed a set of now patched vulnerabilities in Kia vehicles that, if successfully exploited, could have allowed remote control over key functions simply by using only a license plate. "These attacks could be executed remotely on any hardware-equipped vehicle in...

IceCMS 安全漏洞

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . An authentication bypass vulnerability exists in IceCMS v3.4.7 and earlier versions, which stems from the inclusion of hard-coded JWT keys that can be exploited by an attacker to forge JWT...

Unauthorized Access

github.com/zitadel/zitadel is vulnerable to Unauthorized Access. The vulnerability is due to inadequate enforcement of account deactivation protocols, allowing an attacker to gain unauthorized access to the system using tokens from deactivated service accounts...

The vulnerability of HashiCorp’s Vault and Vault Enterprise file archiving platforms lies in the fact that inserting confidential information into the log file allows a perpetrator to access this confidential information.

The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms lies in the fact that open text values for client tokens and token accessories are stored in an audit log. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

CVE-2024-8263

An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in version 3.10.17, 3.11.15, 3.12.9, 3.13.4, and 3.14.1. Thi...

CVE-2024-43201

The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens and sensitive information. Planet Fitness first addressed this vulnerability in version 9.8.12 released on 2024-07-25 a...

The vulnerability of the SDK plugin for Grafana’s monitoring and observation platform lies in the fact that authentication tokens are transmitted to certain target plugins. This allows a malicious actor to gain access to repository credentials.

The vulnerability of the SDK plugin for Grafana monitoring and observability lies in the fact that authentication tokens are transmitted to certain target plugins. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to repository credentials...

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server that stem...

PT-2024-30367 · Planet Fitness · Planet Fitness Workouts

Name of the Vulnerable Software and Affected Versions: The Planet Fitness Workouts iOS and Android mobile apps versions prior to 9.8.12 Description: The issue is related to the failure of the Planet Fitness Workouts iOS and Android mobile apps to properly validate TLS certificates. This allows an...

CVE-2024-45229

The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. However, it was discovered that for Directors directly connected to the Internet, one of these APIs can ...

ROS-20240918-13

A vulnerability in HashiCorp's Vault and Vault Enterprise enterprise information archiving platforms is related to storing the plaintext values of client tokens and token accessors in the audit log auditing. Exploitation of the vulnerability could allow an attacker to gain access to sensitive...

CVE-2024-8888

An attacker with access to the network where CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could steal the tokens used on the web, since these have no expiration date to access the web application without restrictions. Token theft can originate from different methods such as network...

PT-2024-39300 · Circutor · Circutor Q-Smt

Name of the Vulnerable Software and Affected Versions: CIRCUTOR Q-SMT version 1.0.4 Description: An attacker with access to the network where CIRCUTOR Q-SMT is located could steal the tokens used on the web, since these have no expiration date to access the web application without restrictions...

CIRCUTOR Q-SMT 代码问题漏洞

CIRCUTOR Q-SMT is an industrial hardware device from CIRCUTOR, Inc. A code issue vulnerability exists in CIRCUTOR Q-SMT version 1.0.4, which stems from the use of tokens that do not have an expiration date, which allows an attacker to steal tokens and gain unrestricted access to a web application...

Successful user login events using PAT does not update last login date and are not added to the audit logs

h3. Issue Summary When users authenticate on Confluence, this information should be update last login date as well as add as new events on the audit log when full coverage is enabled for the Security category. Requests made with personal access tokens PAT for REST API won't create a new entry on...

Exploit for CVE-2024-55271

Gym Management System CVE-2024-55271 A GYM management sys...

MFASOFT Secure Authentication Server 安全漏洞

MFASOFT Secure Authentication Server is a two-factor authentication system based on one-time passwords OTP from the Russian company MFASOFT. A security vulnerability exists in MFASOFT Secure Authentication Server SAS version 1.8.x through versions prior to 1.9.040924 that stems from improper acce...