41672 matches found
EUVD-2026-92103
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...
CVE-2026-105210 ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...
CVE-2026-105210 ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...
CVE-2026-105215: Authentication Bypass by Spoofing
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...
CVE-2026-105210: Improper Authentication
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...
OPENSUSE-SU-2026:11997-1 python313-XStatic-jquery-ui-1.13.0.1-2.4 on GA media
These are all security issues fixed in the python313-XStatic-jquery-ui-1.13.0.1-2.4 package on the GA media of openSUSE Tumbleweed...
PT-2026-104634
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...
PT-2026-105706
These are all security issues fixed in the python313-XStatic-jquery-ui-1.13.0.1-2.4 package on the GA media of openSUSE Tumbleweed...
PT-2026-104639
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: rclone, kyverno-policy-reporter-ui, step-issuer-fips, gogatekeeper, cloudflared, karma, step-issuer, step, step-ca-fips, gitness, caddy, rclone-fips, kyverno-policy-reporter-ui-fips, step-ca, dapr-fips, step-fips, caddy-fips, telegraf, tkn, buf, tkn-fips, sftpgo, dap...
GHSA-XCVF-46F4-XWXF vulnerabilities
Vulnerabilities for packages: karma, cloudflared, sftpgo, step-issuer, step, step-ca, caddy, rclone, gitness, buf, tkn, kyverno-policy-reporter-ui, gogatekeeper...
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: karma, cloudflared, sftpgo, step-issuer, step, step-ca, caddy, rclone, gitness, buf, tkn, kyverno-policy-reporter-ui, gogatekeeper...
Malicious Package
Overview ui-base-colors is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Pentesting
⚡ Pentesting Toolkit v3.0 — AMAN EDITION Pentesting Toolkit e...
CVE-2026-95307
An ui misrepresentation flaw was found in the ExtensionsMenu component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/423956129...
CVE-2026-95363
An ui misrepresentation flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522344883...
CVE-2026-95321
An ui misrepresentation flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/545879261...
CVE-2026-95346
An ui misrepresentation flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/514059630...