1018 matches found
Aegis
Aegis Authenticator Aegis Authenticator 는 Android용 무료·안전한 오픈소스 2FA 앱입니다. 온라인 서비스에 안전한 인증기를 제공하는 동시에, 기존 인증기 앱에는 없는 적절한 암호화 및 백업과 같은 기능도 포함합니다. Aegis는 HOTP와 TOTP를 지원하므로 수천 개의 서비스와 호환됩니다. 자주 묻는 질문 목록은 FAQ를 확인하세요. 앱의 보안 설계와 볼트 형식은 이 문서에 자세히 설명되어 있습니다. 기능 무료 및 오픈소스 보안 볼트는 AES-256-GCM으로 암호화되며, 다음 방법으로...
aws-iam-authenticator
AWS IAM Authenticator for Kubernetes A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS...
CVE-2026-105301
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
squarephish
SquarePhish SquarePhish는 OAuth Device Code 인증 흐름과 QR 코드를 결합한 기술을 사용하는 고급 피싱 도구입니다. 피싱 공격에 OAuth Device Code 흐름을 사용하는 방법에 대한 자세한 내용은 PhishInSuits를 참조하세요. / | | | | | | | | | | | | | \ \ / | | | |/ | '/ \ /| ' | / | ' \ | | | || | | | | | / | | | | | \ \ | | | |/ , |,|,|| || || |||/| || | | ||...
CVE-2026-105301 Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
EUVD-2026-92255
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
CVE-2026-105301
A flaw exists in the X.509 client-certificate authenticator of Keycloak , an identity and access management solution. When configured to check certificate revocation via CRL Distribution Points or OCSP , the server may process a specially crafted certificate provided by an attacker. This causes K...
CVE-2026-105301 Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
CVE-2026-105301
A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...
kl-security-key
KL Security Key Karaaslan Labs의 실험적 오픈소스 RP2040 FIDO2/WebAuthn 인증기 엔지니어링 및 상호운용성 프로젝트. 상태: 엔지니어링/연구 프로젝트. FIDO Alliance 인증을 받지 않았습니다. 상용 고보증 보안 토큰이 아닙니다. KL Security Key는 polhenarejos/pico-fido의 선별된 파생 프로젝트입니다. 이 프로젝트는 저비용 RP2040 보드가 물리적 WebAuthn 인증기로서 어디까지 활용될 수 있는지 탐구하며, 동시에 아이덴티티, 증명attestatio...
pac4j-check
pac4j-check CVE-2026-29000CVSS 10.0 오프라인 점검 —— 공식 advisory에 나열되지 않은 패키지까지 포함. English | 中文 단일 jar, 약 24KB, 런타임 의존성 제로, Java 8 이상 사용 가능, 완전 오프라인, 어떤 데이터도 외부로 전송하지 않음. 이 취약점이 무엇인가 org.pac4j:pac4j-jwt의 JwtAuthenticator는 암호화된 JWTJWE를 처리할 때 서명 검증을 강제하지 않습니다. 공격자가 서버의 RSA 공개키공개키는 원래 공개됨만 확보하면, JWE로 감싼...
tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator
A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...
CVE-2026-103884
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
CVE-2026-103884
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
CVE-2026-103884
A flaw exists in the X.509 client certificate authenticator of Keycloak . When CRL Distribution Point checking is enabled, the server fails to properly validate file paths provided within a client certificate. This path traversal vulnerability allows an attacker to provide a specially crafted cer...
EUVD-2026-90972
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator
A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...
OpenNebula-CVE-2025-56534
OpenNebula-CVE-2025-56534 Exploit Title : OpenNebula 6.10.0.1 - 사용자 정의 인증 드라이버의 저장형 XSS 교차 사이트 스크립팅 Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Proof of Concept : Fix : OpenNebula =7.0으로 업그레이드하세요...
AlmaLinux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788353293)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788353293 advisory. - Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constrain...
AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1788273808)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788273808 advisory. - Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constrain...