OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

CVE-2025-51471-POC

CVE-2025-51471 - Ollama 跨域令牌泄露 PoC 作者： ajtazer 🔥 概述 此仓库包含 CVE-2025-51471 的概念验证（PoC），这是一个影响 所有 Ollama 版本 （包括最新版本）的跨域认证令牌泄露漏洞。 📋 漏洞描述 当 Ollama 从返回 401 Unauthorized 的 HTTPS 服务器拉取模型时，它会跟随 WWW-Authenticate 头中的 realm URL，而 不验证其是否属于同一域... 这允许攻击者： 1. 搭建一个恶意的“registry”服务器 2. 诱骗用户从该服务器拉取模型 3...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2025:1755115606)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1755115606 advisory. - Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...

TOTPAuthenticate

TOTP Authenticate ============================ 使用会话处理规则将 TOTP 令牌添加到传出请求中。 适用于 Burp Suite Enterprise Edition 请注意，扩展由 Burp 的第三方用户编写，PortSwigger 不对其质量或对任何特定用途的适用性提供任何保证。 用法 1. 构建扩展 2. 将扩展加载到 Burp Enterprise，并将其添加到您的“站点详细信息”页面 3. 在 Burp Suite Professional 中配置您的会话处理规则 4. 将扫描配置导入...

Improper Verification of Cryptographic Signature

Overview social-auth-core is a package that makes Python social authentication simple. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the authcomplete method in the VKAppOAuth2 backend, where the authkey signature is not required to be...

CVE-2026-51994

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

EUVD-2026-86017

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

CVE-2026-51994

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

CVE-2026-51994

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

CVE-2026-51994: Server-Side Request Forgery (SSRF)

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

PT-2026-97822

Name of the Vulnerable Software and Affected Versions mcp-remote versions 0.1.32 through 0.1.38 Description The software is subject to Server-Side Request Forgery SSRF, a flaw that allows a server to make requests to an unintended location. This occurs because the application trusts and fetches t...

CVE-2026-51994

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

CVE-2026-51994

Versions 0.1.32 through 0.1.38 of mcp-remote are vulnerable to Server-Side Request Forgery (SSRF) . The root cause is the insecure processing of the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate header . This vulnerability allows an attacker to potentially force the ...

EUVD-2026-85030

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-88756

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...

CVE-2026-88756

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...

CVE-2026-88756

Pagekit CMS versions

PT-2026-96305

Name of the Vulnerable Software and Affected Versions Pagekit CMS versions prior to 1.0.19 Description An unauthenticated attacker can perform SQL injection, a technique used to manipulate database queries, by submitting a malicious credentials array to the public login endpoint 'POST...

CVE-2026-88756: Improper Neutralization of Special Elements used in an SQL Command

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...

CVE-2026-88756

Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...