tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

A flaw was found in Apache Tomcat. This incorrect authorization vulnerability occurs within the FORM authentication process, allowing a user to bypass security constraints. This bypass enables unauthorized access to resources via a GET request, even when those resources are intended to be...

tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...

CVE-2026-116794

A flaw was found in russh. When processing signing requests for SSH keys configured to require explicit confirmation, the SSH agent server component fails to invoke the confirmation check and automatically returns success. A local process or remote user with access to the forwarded SSH agent sock...

cve-2026-32746

CVE-2026-32746 - telnetd LINEMODE SLC Buffer Overflow Pre-authentication buffer overflow in GNU InetUtils telnetd's LINEMODE SLC Set Local Characters handler. CVSS 3.1: 9.8 Critical | CWE: CWE-120, CWE-787 Overview The addslc function in telnetd/slc.c appends 3 bytes per SLC triplet to a fixed...

CVE-2026-119278

Versions 3.0.0 through 3.3.7 and 3.4.5 of MariaDB Connector/J are vulnerable to a denial-of-service condition during caching_sha2_password authentication. The root cause is the improper handling of the authentication-more-data response, where the driver treats it as a length-encoded byte array an...

CVE-2026-119278 MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7 and 3.4.5, during cachingsha2password authentication, the authentication-more-data response was treated as a length-encoded byte array, memory was allocated from the...

CVE-2026-119278 MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7 and 3.4.5, during cachingsha2password authentication, the authentication-more-data response was treated as a length-encoded byte array, memory was allocated from the...

CVE-2026-119186 Forge: AES-GCM authentication bypass via unvalidated tagLength option

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option passed to start during decryption through forge.cipher.createDecipher. When an application derived tagLength from received da...

CVE-2026-119186

The node-forge (Forge) JavaScript TLS implementation contains an AES-GCM authentication bypass in versions prior to 1.4.1 . The vulnerability stems from a failure to validate the tagLength option in forge.cipher.createDecipher().start(). If an application derives tagLength from received data or u...

CVE-2026-119186 Forge: AES-GCM authentication bypass via unvalidated tagLength option

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option passed to start during decryption through forge.cipher.createDecipher. When an application derived tagLength from received da...

CVE-2026-119186 Forge: AES-GCM authentication bypass via unvalidated tagLength option

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option passed to start during decryption through forge.cipher.createDecipher. When an application derived tagLength from received da...

CVE-2023-50564

CVE-2023-50564 How to use First setup a listener for the reverse shell. Terminal 1 nc -nlvp Execute the script which will attempt to install a pluck module sending the reverse shell back to us. Terminal 2 go run exploit.go -url -password -i -p...

Security Bulletin: Langflow OSS is affected by multiple vulnerabilities

Summary Langflow OSS is affected by multiple vulnerabilities that could allow a remote attacker to bypass authentication controls, execute arbitrary code, expose application programming interface API credentials, or disclose information through vulnerable dependencies. Issues include an incomplet...

skf-cli

SKF-CLI Discontinued About SKF Lab is a project from @blabla1337, Powered by OWASP, SKF-CLI is not a official release from OWASP, it's a personal project from myself. No longer Supporting the project cause demo.skflabs changed it's domain and added authnication $ python3 skf.py --help ╔═╗╦╔═╔═╗...

CVE-2026-24061-Scanner

CVE-2026-24061 Scanner: GNU Inetutils Telnet Exploit Checker CVE-2026-24061 Scanner is a Bash Script-based tool for performing detection reconnaissance and active verification active exploitation check of the Authentication Bypass vulnerability in the telnetd service of the GNU Inetutils package...

CVE-2026-118763

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts contains a RegistryClient.signIn method that stores registry Authorization and Docker configuration headers as defaults on a shared HTTP client, while...

CVE-2026-107059

An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authentication...

CVE-2026-118763

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.2, packages/oci/src/registry.ts contains a RegistryClient.signIn method that stores registry Authorization and Docker configuration headers as defaults on a shared HTTP client, while...

zip: AES Entry HMAC Authentication Bypass on Premature EOF

Summary An AES-encrypted AE-x entry's authentication code is verified only when the reader's byte counter lands exactly on zero. If the bounded entry reader reaches the archive's actual EOF before the attacker-controlled, header-declared compressedsize, the counter remains positive, the HMAC is...