Reflected Cross-Site Scripting (Reflected XSS)

Better-auth is vulnerable to Reflected cross-site scripting XSS. The vulnerability is due to HTML injection due to improper handling of user input on the /api/auth/error page, allowing an attacker to execute arbitrary JavaScript in a victim’s browser...

trojan 安全漏洞

trojan is a multi-user administration and deployment program by Jrohy Individual Developer, supporting web page administration. A security vulnerability exists in trojan versions v.2.0.0 through v.2.15.3, which is caused by elevation of privilege via the initialization interface /auth/register...

CVE-2022-3095

The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '' characters in URIs, which can lead to auth bypass in webapp...

CVE-2022-3696

A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA...

GHSA-9X4V-XFQ5-M8X5 Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)

Summary The better-auth /api/auth/error page was vulnerable to HTML injection, resulting in a reflected cross-site scripting XSS vulnerability. Details The value of error URL parameter was reflected as HTML on the error page:...

Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)

Summary The better-auth /api/auth/error page was vulnerable to HTML injection, resulting in a reflected cross-site scripting XSS vulnerability. Details The value of error URL parameter was reflected as HTML on the error page:...

CVE-2022-39268

Impact In a CSRF attack, an innocent end user is tricked by an attacker into submitting a web request that they did not intend. This may cause actions to be performed on the website that can include inadvertent client or server data leakage, change of session state, or manipulation of an end user...

Security Bulletin: IBM Cloud Pak for Network Automation 2.7.5 addresses multiple security vulnerabilities.

Summary IBM Cloud Pak for Network Automation 2.7.5 addresses multiple security vulnerabilities. Vulnerability Details CVEID:CVE-2024-32879 DESCRIPTION: Python Social Auth Django could allow a remote authenticated attacker to bypass security restrictions, caused by improper handling of case...

Security update for selinux-policy

This update for selinux-policy fixes the following issues: Update to version 20230523+git25.ad22dd7f: Backport wtmpdb label change to have the same wtmpdb label as in SL Micro 6.1 bsc1229132 Add authrwwtmpdbloginrecords to domains using authmanageloginrecords Add authrwwtmpdbloginrecords to modul...

go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace

...

nvmet-auth: assign dh_key to NULL after kfree_sensitive

...

MAL-2025-547 Malicious code in meli-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fd228933bfbd22b6537f1ebb684b7d183ba26dc3647c4b9cffb7e5a089ecac1 The OpenSSF Package Analysis project identified 'meli-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fd228933bfbd22b6537f1ebb684b7d183ba26dc3647c4b9cffb7e5a089ecac1 The OpenSSF Package Analysis project identified 'meli-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c565f4f063903c396ce391a766b2f2e23376ee54056eed2f91fe4584c931069 The OpenSSF Package Analysis project identified 'lyft-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-524 Malicious code in lyft-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c565f4f063903c396ce391a766b2f2e23376ee54056eed2f91fe4584c931069 The OpenSSF Package Analysis project identified 'lyft-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-486 Malicious code in iberia-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd29cd417b8dec54243dc5adc05798a3265ed0ecab1ca348793ac0b61d885e23 The OpenSSF Package Analysis project identified 'iberia-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd29cd417b8dec54243dc5adc05798a3265ed0ecab1ca348793ac0b61d885e23 The OpenSSF Package Analysis project identified 'iberia-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c54464c94638aea7ef7fe1487d3fca93fd814ea21143ed03917174262afebe99 The OpenSSF Package Analysis project identified 'godaddy-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-459 Malicious code in godaddy-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c54464c94638aea7ef7fe1487d3fca93fd814ea21143ed03917174262afebe99 The OpenSSF Package Analysis project identified 'godaddy-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-397 Malicious code in bookingcom-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7237784b36f09a01626b97a404f66a5ec889f55f623dd7d6e907f48d2b99d69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...